Malware named “SparkCat” used to steal cryptocurrency recovery phrases has targeted iPhones and Android devices via legitimate apps on the App Store and Google Play. The malware, active since 2024, has been downloaded over 242,000 times from Google Play. It uses the less common Rust programming language and Google’s ML Kit for OCR, scanning for keywords in the victim’s image gallery. This is the first such malware found in Apple’s App Store, dispelling its perceived immunity.
![](https://healsecurity.com/wp-content/uploads/2025/02/1120_ransomware.jpg)
Ransomware attackers turn to workers for data breach access
Ransomware attackers are encouraging employees to infect their employers’ networks with viruses, according to security vendor GroupSense. The appeal is made in ransomware notifications and