Imagine this: Nasty software sneaking onto your phone and quietly grabbing every single photo you’ve ever taken. That’s the reality of a new threat called SparkKitty, recently discovered by security experts at Kaspersky. What’s particularly alarming is that this malware managed to slip into the official app stores for both iPhones and Android devices.
Contents
Here’s what you need to know: this malware aims to steal your photos, it was hiding in two specific apps, and if you have them, you need to delete them ASAP.
What This Malware Does (And How It Works)
Smartphones hold our lives in pictures – from precious memories to important documents. SparkKitty is designed to exploit that. It’s a type of spyware, meaning it spies on you, but its main goal here is simple and chilling: collecting all the images stored on your device.
Kaspersky researchers Sergey Puzan and Dmitry Kalinin reported finding this threat, confirming it has been active since at least February 2024. The fact that it got past the security checks of both Apple’s App Store and Google Play is a big deal and a reminder that you still need to be cautious, even when downloading from official sources.
Apple and Google logos displayed above a generic smartphone screen, symbolizing the broad reach of mobile threats across platforms.
More Than Just Photos? The SparkCat Link
Security researchers believe SparkKitty might be related to an older threat called SparkCat. While SparkKitty grabs all photos, SparkCat was known for specifically targeting photos that contained sensitive information, like cryptocurrency wallet recovery phrases (those unique sets of words that let you access your digital money if you forget your password). If SparkKitty shares code with SparkCat, it suggests a potential motive beyond just general snooping – perhaps looking for valuable images.
Are Your Apps Safe? Identifying the Threat
The most critical piece of information for you is knowing which apps were infected. According to Kaspersky, the specific apps used in this campaign were:
- “币coin” (found on the Apple App Store for iPhone)
- “SOEX” (found on the Google Play Store for Android)
Both of these apps have now been removed from their respective app stores at the time of this report.
Action required: Check your iPhone or Android phone right now. If you see either the “币coin” or “SOEX” app installed, delete it immediately. Do not open it, just uninstall it.
A Google spokesperson confirmed that the developer of the Android app “SOEX” has been banned. They also stated that Android users are automatically protected against this app by Google Play Protect, a security feature built into Android devices with Google Play Services, regardless of where the app was downloaded from. (This suggests that even if you downloaded it before it was removed, Play Protect should flag it).
Apple has been reached out to for comment on the situation with “币coin”.
What You Can Do Right Now
While these specific apps are gone from the stores, this incident highlights the ongoing need for vigilance. Here are simple steps to protect yourself:
- Check your apps: As mentioned, immediately delete “币coin” or “SOEX” if they are on your device.
- Be cautious with permissions: When you download a new app, pay attention to what permissions it asks for (like access to your photos, contacts, or location). Ask yourself if the app really needs that access to function. A photo editing app needs photo access, but does a simple game?
- Keep your phone updated: Operating system updates for both iOS and Android often include crucial security patches that protect against the latest threats.
- Stick to official app stores: While this case shows they aren’t foolproof, downloading from the official Apple App Store or Google Play Store is significantly safer than getting apps from third-party websites.
- Learn about other threats: Staying informed is key. Did you know there are specific calls you should never answer on your smartphone? Or that the FBI advised a secret code to protect against AI threats? Be aware of threats like dangerous SMS messages too.
Staying Safe in a Digital World
The discovery of SparkKitty is a clear reminder that malware developers are constantly trying to find new ways into our devices, even through trusted channels like official app stores. The threat of having all your personal photos stolen is a serious privacy concern. By checking for the specific apps mentioned and practicing general mobile security hygiene, you can significantly reduce your risk. Stay alert, update your devices, and question app permissions – it’s your best defense in keeping your digital life secure.
