App Stores Hit by SparkKitty Malware Targeting Crypto Wallet Seed Phrases
SparkKitty Malware Found in App Stores Targets Crypto Wallet Seed Phrases
Security researchers have identified a piece of malware dubbed SparkKitty circulating through app stores, designed to steal users’ crypto wallet seed phrases.
Seed phrases (also called recovery phrases) are the set of words that can restore access to a cryptocurrency wallet. If an attacker obtains a seed phrase, they can typically take control of the wallet and move funds without needing additional credentials.
The discovery matters because it highlights an ongoing risk: users often treat official app stores as a strong safety filter, but malicious or compromised apps can still appear and reach large audiences before being detected and removed. When the target is a seed phrase, the impact can be immediate and difficult to reverse due to the irreversible nature of most blockchain transactions.
The broader context is that malware aimed at crypto users continues to evolve beyond classic phishing emails and fake websites. Attackers increasingly look for ways to intercept sensitive information directly on devices, including recovery phrases, private keys, and authentication prompts. App-store distribution is especially effective because it places malicious software where users already search for tools, wallets, and related utilities.
For crypto holders, the incident is a reminder that wallet security depends as much on device and app hygiene as it does on on-chain safeguards. A compromised device can undermine even strong wallet practices if the recovery phrase is exposed.
