The new SparkKitty Trojan spy in the App Store and Google Play

A new spyware campaign dubbed SparkKitty has been discovered targeting both iOS and Android devices. The malware, believed to be connected to the previously identified SparkCat campaign, is distributed through official app stores and unofficial sources. It primarily steals photos from infected devices, likely searching for cryptocurrency wallet information. The campaign has been active since at least February 2024 and mainly targets users in Southeast Asia and China. The malware is embedded in various apps, including modified versions of popular applications like TikTok, and uses different techniques to evade detection. The researchers identified multiple variations of the malware, including obfuscated libraries and malicious frameworks mimicking legitimate ones.

• Signal adds encypted local backup support to iOS, desktop appsNews2026-09-29
• VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilitiesHighVulnerability2026-09-25
• Multiple Lenovo Tablets shipped with a known private test key for Android Verified BootHighVulnerability2026-10-20
• YuanKong RAT: the Android remote-control service that stamps its operators' names into every buildMalware2026-10-16
• Android gets AI defenses against messaging scams, fake callsNews2026-10-15