First OCR Spyware Breaches Both Apple and Google App Stores To Steal Crypto Wallet Phrases

Kaspersky researchers have discovered malware hiding in both Google Play and Apple's App Store that uses optical character recognition to steal cryptocurrency wallet recovery phrases from users' photo galleries. Dubbed "SparkCat" by security firm ESET, the malware was embedded in several messaging and food delivery apps, with the infected Google Play apps accumulating over 242,000 downloads combined.
This marks the first known instance of such OCR-based spyware making it into Apple's App Store.