SparkKitty Malware: Stealing Photos from iOS and Android Users

A sophisticated Trojan malware known as SparkKitty has been actively targeting iOS and Android devices since early 2024, infiltrating official app stores and untrusted websites to steal images from users’ galleries. This campaign, an evolution of the previous SparkCat operation, poses significant threats, particularly in Southeast Asia and China, by exfiltrating personal photos and potentially capturing sensitive data like cryptocurrency wallet seed phrases.


Distribution Methods
SparkKitty has successfully bypassed app store vetting processes, embedding itself in seemingly legitimate applications such as 币coin (a cryptocurrency tracker) and SOEX (a messaging platform with trading features).


The SOEX app alone garnered over 10,000 downloads before its removal from Google Play, showcasing the malware's ability to spread through trusted platforms.
On iOS, SparkKitty exploits enterprise provisioning profiles to sideload malicious apps, circumventing Apple’s standard review process and traditional security measures.
"NPAV recommends home users and organizations to maintain strong, up-to-date cybersecurity measures. Install NPAV on your desktop, laptop, and mobile devices to ensure world-class protection against fraud, malware, and ransomware attacks.
Choose NPAV and be a part of our mission to make the digital world safer for everyone."
- Other (43)
- Ransomware (154)
- Events and News (27)
- Features (45)
- Security (487)
- Tips (79)
- Google (30)
- Achievements (11)
- Products (36)
- Activation (7)
- Dealers (1)
- Bank Phishing (53)
- Malware Alerts (235)
- Cyber Attack (303)
- Data Backup (13)
- Data Breach (131)
- Phishing (165)
- Securty Tips (2)
- Browser Hijack (19)
- Adware (15)
- Email And Password (71)
- Android Security (78)
- Knoweldgebase (38)
- Botnet (17)
- Updates (4)
- Alert (71)
- Hacking (71)
- Social Media (8)
- vulnerability (75)
- Hacker (38)
- Spyware (12)
- Windows (8)
- Microsoft (26)
- Uber (1)
- YouTube (1)
- Trojan (5)
- Website hacks (10)
- Paytm (1)
- Credit card scam (2)
- Telegram (3)
- RAT (8)
- Bug (3)
- Twitter (2)
- Facebook (8)
- Banking Trojan (10)
- Mozilla (2)
- COVID-19 (5)
- Instagram (3)
- NPAV Announcement (9)
- IoT Security (2)
- Deals and Offers (2)
- Cloud Security (12)
- Offers (5)
- Gaming (1)
- FireFox (2)
- LinkedIn (3)
- WhatsApp (6)
- Amazon (2)
- DMart (1)
- Payment Risk (5)
- Occasion (3)
- firewall (3)
- Cloud malware (2)
- Cloud storage (2)
- Financial fraud (49)
- Impersonation phishing (1)
- DDoS (7)
- Smishing (2)
- Whale (0)
- Whale phishing (4)
- WINRAR (2)
- ZIP (2)
- Fraud Protector (38)