A recent malware initiative named SparkCat has utilized a collection of fraudulent applications on the app stores of both Apple and Google to appropriates users’ mnemonic phrases linked to cryptocurrency wallets.
The assaults capitalize on an optical character recognition (OCR) system to extract specific images that hold wallet recovery phrases from photo libraries and transmit them to a command-and-control (C2) server,