Cybersecurity researchers have discovered a cross-platform malware campaign named “SparkCat” that targets cryptocurrency wallet recovery phrases through malicious mobile apps. Cybersecurity researchers at Kaspersky first observed the campaign in March 2023. It uses a software development kit embedded in modified messaging apps to scan users’ image galleries for sensitive data. Privileged access is exploited through code obfuscation and apps granting access to the user’s image gallery, allowing the malware to transmit information to remote servers.
![](https://healsecurity.com/wp-content/uploads/2025/02/macos-stealer-market-share.jpg)
‘Stealers’ Are an Increasingly Common Mac Malware
The 2025 State of Malware report reveals an increase in macOS stealers, a malicious malware stealing credit card information, authentication cookies, and more. This malware