Malware found in iOS and Android apps steals cryptocurrency data
Researchers have discovered that several iOS and Android apps on official app stores contain a malicious software development kit (SDK) called Spark, which can steal cryptocurrency wallet recovery phrases. This marks the first instance of such malware found in Apple's App Store. The infected apps have been downloaded over 242,000 times from Google Play. The SDK selectively uploads images from users' galleries to a command and control server, targeting financial information related to cryptocurrency wallets. While Google and Apple have removed many of the affected apps, some remain available. Users are advised to check for these apps, remove them, and consider using mobile security software to protect their devices.