Kaspersky Identifies New Malware SparkKitty Targeting Crypto Users
Kaspersky has identified a new malware, SparkKitty, which targets cryptocurrency users in Southeast Asia and China by stealing screenshots of seed phrases from infected mobile devices.
Investigation and Industry Response
Kaspersky researchers Sergey Puzan and Dmitry Kalinin have led the investigation into SparkKitty, which follows the earlier
SparkCat campaign. Apple and Google have been alerted and have removed apps linked to the activity. The purpose of SparkKitty revolves around the bulk theft of crypto-related screenshots, posing significant risks to users storing sensitive images on mobile devices. Sergey Puzan, Analyst, Kaspersky, stated, “Although we suspect the attackers’ main goal is to find screenshots of crypto wallet seed phrases, other sensitive data could also be present in the stolen images.”
Geographical Impact and Precautions
Unidentified attackers are believed to be behind SparkKitty, aiming at users in Southeast Asia and China. Both tech giants,
Google and
Apple, have responded by removing affected applications from their platforms. The malware’s presence underscores the urgent need for users to safeguard seed phrases physically rather than digitally.
Security Strategies for Crypto Users
Immediate concerns within the impacted regions focus on adopting stronger
data protection strategies. Crypto wallets using seed phrases are at risk, potentially affecting all digital tokens held in self-custodial mobile wallets. The community stresses the importance of implementing non-digital means of secure storage to protect asset integrity.
Implications and Future Measures
The absence of on-chain disruptions or market-level impacts suggests that SparkKitty’s threat primarily lies in personal security breaches. Historical data shows a pattern of
OCR-based attacks targeting seed phrases as a lucrative method for cybercriminals in similar cases, advising caution moving forward. For further insights, incorporating historical data related to malware like SparkCat can provide guidance on addressing similar security challenges. Enhanced cybersecurity measures and awareness can mitigate potential theft, as the crypto industry continues to evolve with these threats.
Disclaimer: The content on The CCPress is provided for informational purposes only and should not be considered financial or investment advice. Cryptocurrency investments carry inherent risks. Please consult a qualified financial advisor before making any investment decisions.
