> TritonInfoSec News
Home / Apr 05, 2026 / Story
0
#9 The Hacker News general April 03, 2026 at 09:10 UTC

New SparkCat Variant in iOS, Android Apps Steals Crypto Wallet Recovery Phrase Images

By [email protected] (The Hacker News)

AI Summary

A new SparkCat malware variant has been discovered on Apple App Store and Google Play Store, hiding in enterprise messenger and food delivery apps to steal cryptocurrency wallet recovery phrase images. The malware specifically targets crypto wallet seed phrases stored as images on mobile devices, representing an evolution in mobile cryptocurrency theft techniques. This cross-platform threat demonstrates how malware authors adapt to target valuable cryptocurrency assets through legitimate app stores.

Read full article → https://thehackernews.com/2026/04/new-sparkcat-var…

Relevance score: 75.0/100

# More from April 05

  1. 1
    Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS The Hacker News
  2. 2
    36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants The Hacker News
  3. 3
    Axios npm hack used fake Teams error fix to hijack maintainer account BleepingComputer
  4. 4
    European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack SecurityWeek
  5. 5
    LinkedIn secretly scans for 6,000+ Chrome extensions, collects data BleepingComputer
  6. 6
    Device code phishing attacks surge 37x as new kits spread online BleepingComputer
  7. 7
    TrueConf Zero-Day Exploited in Asian Government Attacks SecurityWeek
  8. 8
    React2Shell Exploited in Large-Scale Credential Harvesting Campaign SecurityWeek
  9. 10
    CERT-EU: European Commission hack exposes data of 30 EU entities BleepingComputer