Check Point Reports SparkKitty Malware on App Store and Google Play That Uses OCR to Steal Crypto Recovery Phrases

Security firm Check Point said the SparkKitty malware was found embedded in apps on the Apple App Store, Google Play, and third party Android stores. It uses OCR to scan photo albums for wallet recovery phrases and uploads detected mnemonics, passwords, QR codes, and device data to a remote server after gaining photo library access.