Silent Threat: New Malware Targets Crypto Wallets on iOS and Android — Are Your Assets Safe?
A new threat has emerged in the digital asset world. Security researchers have uncovered sophisticated malware specifically designed to target cryptocurrency wallets on mobile devices, including both iOS and Android. As crypto adoption grows globally, this attack highlights how cybercriminals are becoming increasingly aggressive in targeting digital asset holders.
A New Threat: Hard-to-Detect Malware
The malware was first identified by cybersecurity teams working closely with the blockchain industry. Unlike previous threats that mainly focused on desktop environments, this malware is engineered to exploit security gaps in mobile operating systems and wallet applications.
According to reports from BeInCrypto, this malware can:
-
Steal users’ seed phrases
-
Record keyboard activity
-
Monitor the clipboard to capture wallet addresses during copy-paste actions
-
Send data to remote servers without the victim’s knowledge
Even more concerning, the malware can disguise itself as legitimate apps or fake system updates, making it difficult for regular users to spot.
π¨ SlowMist TI Alert π¨
— SlowMist (@SlowMist_Team) June 24, 2025
A new malware named #SparkKitty that steals all photos from infected iOS & Android devices — searching for crypto wallet seed phrases.
⚠️ Delivered via:
πΈ "εΈcoin" (App Store)
πΈ "SOEX" (Google Play, 10K+ installs, now removed)
πΈ Casino apps, adult… pic.twitter.com/47WDc8l6tQ
The Main Targets: Popular Wallets and Crypto Apps
Researchers noted that this malware specifically targets popular wallet apps such as Trust Wallet, MetaMask, and Coinbase Wallet. It also focuses on crypto exchange apps and DeFi platforms.
The malware spreads through:
-
Fake websites that mimic official pages
-
Phishing links on social media and messaging apps
-
Malicious APK files installed outside the Google Play Store
Why This Attack Is So Dangerous
Unlike typical malware that causes minor disruptions, this attack directly threatens valuable assets: your crypto holdings. With stolen seed phrases or private keys, hackers can easily drain victims’ wallets.
The attack is particularly dangerous because:
-
It requires minimal interaction from victims once installed
-
Transactions on the blockchain are anonymous and irreversible
-
It can spread quickly via unofficial app distribution channels
How to Protect Your Crypto Assets
Here are essential steps to minimize risk:
-
Avoid installing apps from unofficial sources (use only Play Store or App Store)
-
Regularly check app permissions
Our researchers uncovered #SparkKitty, a stealthy Trojan targeting both #iOS and #Android devices.
— Kaspersky (@kaspersky) June 24, 2025
It captures images and device data from infected phones and transmits them to the attackers. The Trojan was embedded in apps related to #crypto, gambling, and even a trojanized… pic.twitter.com/2CjjSwcpeo -
Enable two-factor authentication (2FA)
-
Use hardware wallets for large asset holdings
-
Keep your operating system and apps updated
-
Never share your seed phrase or private keys with anyone
Experts also advise staying alert for suspicious emails, SMS messages, or chat app links, especially those offering “free crypto” or claiming to be from official sources.
Expert Insights: A Complex and Evolving Threat
According to cybersecurity analysts, this type of attack signals a new stage in cybercrime evolution. “Hackers are exploiting users' sense of security when it comes to mobile devices. The reality is that threats on mobile are now as serious, if not more serious, than on desktop,”
FFF
This attack also serves as a reminder that crypto security is not just about blockchain technology—it’s about how users protect access to their assets.
What This Means for the Crypto World
Such attacks could undermine public trust in digital assets, especially among new users. However, the crypto community is continuously working on:
-
Ongoing user education
-
Innovations in non-custodial wallet security
-
Early warning systems at major exchanges
Conclusion: Stay Vigilant, Stay Safe
Crypto opens tremendous opportunities in the digital era, but it also comes with risks that must be managed wisely. This new malware is a wake-up call for all crypto users: never let your guard down.
Protect your assets with the best security practices, and stay cautious of suspicious apps or links.