Analyst: A malicious virus called SparkKitty that steals Wallet mnemonic phrases has been detected, primarily targeting users in China and Southeast Asia.

According to a report by Cointelegraph on June 24, Deep Tide TechFlow news states that the cybersecurity company Kaspersky has discovered a new type of malicious virus called SparkKitty, which infects applications on iOS and Android devices to steal all the images in the user's photo album, intending to look for screenshots of encryption wallet mnemonic phrases.

Kaspersky analysts stated that these malicious applications mainly focus on encryption, including a cryptocurrency information tracking application named "Coin" on the App Store, as well as the communication application SOEX with "encryption trading features" that has been downloaded over 10,000 times on Google Play.

Researchers believe that SparkKitty and the malicious virus SparkCat discovered in January of this year have the same origin, sharing similar characteristics. The activity of this malicious virus began at least from early 2024, primarily targeting users in Southeast Asia and China, but technically it can attack users in any region. Kaspersky has notified Google, and the relevant application has been removed from the app store.