Archive — US — techcrunch
Apple and Google take down malicious mobile apps from their app stores
Apple and Google removed 20 mobile apps after security researchers identified them as carriers of SparkCat malware, which risks user data and crypto wallets by stealing sensitive information. This malware was active for nearly a year and detected in apps downloaded over 242,000 times from the Play Store.
Key points
- Security researchers at Kaspersky detected SparkCat malware in mobile apps.
- Malware was active since March 2024 and identified initially in a food delivery app.
- The malware enabled data theft by capturing text using OCR technology.
- Researchers found the malware in 19 additional unrelated apps, totaling over 242,000 downloads.
- The malware targeted recovery phrases for cryptocurrency wallets and sensitive personal information.
Why it matters
- This incident reflects ongoing challenges in mobile app security and user data protection.
- As of 2025, trends show increased focus on cybersecurity due to rising incidents of malware attacks.
- Similar vulnerabilities have been reported in previous years, highlighting the need for stronger app vetting processes.
The removal of these apps underscores the critical need for robust security measures in mobile applications to protect users from sophisticated malware threats.