The new SparkKitty Trojan spy in the App Store and Google Play | Securelist

A new SparkKitty Trojan spyware, connected to the SparkCat campaign, targets both iOS and Android devices. It steals images from victims’ photo galleries, using OCR to target specific images, and exfiltrates them to C2 servers. The malware, disguised as legitimate frameworks or libraries, is distributed through official app stores and unofficial sources.