It's generally not a good idea to keep screenshots of sensitive information on your phone, but you should probably delete them, especially if they're related to your crypto wallet. A new Trojan spy known as SparkKitty targets information from screenshots stored in your gallery. This spy, likely connected to the infamous SparkCat data stealer that emerged earlier this year, focuses on sensitive data, such as seed phrases for crypto wallets. The new Trojan was first mentioned on SecureList by Kaspersky. Also: How Avast's free AI-powered Scam Guardian protects you from online con artists According to Kaspersky, the malware targets iOS and Android devices. While the malware spread from the App Store and Google Play Store (and has been removed from both), it's also spreading naturally. Here's how the malware works. Kaspersky said it identified one version of the Trojan that copies all images in your gallery and another that uses OCR to find images specifically related to financial information. Also: Best data removal services: Delete yourself from the internet If you have any cryptocurrency, you were probably encouraged to write down a seed phrase when you created your wallet and store it in a secure, offline location. This phrase is crucial for restoring a wallet and its contents on a device other than the original, which makes it an attractive target for thieves. While writing the phrase down is optimal, many people take a screenshot to remember it later. The malware comes from ...
You should probably delete any sensitive screenshots you have in your phone right now. Here's why
ZDNet
·Artie Beaty
·Published Jun 26, 2025
·Updated
Affected Software
3 affected components
Kaspersky SecureList
Apple iOS
Google Android
Frequently Asked Questions
1
What is the importance of deleting sensitive screenshots from your phone?
Sensitive screenshots, especially those related to crypto wallets, can be targeted by malware like SparkKitty.
2
What is the main threat discussed in the article?
The main threat discussed is the SparkKitty Trojan spy that extracts sensitive information from stored screenshots.
3
Which operating systems are affected by the SparkKitty Trojan?
The SparkKitty Trojan affects users on Apple iOS and Google Android devices.
4
What kind of information does the SparkKitty Trojan specifically target?
The SparkKitty Trojan specifically targets sensitive information found in screenshots stored in users' galleries.
5
What preventive measure is recommended in the article against SparkKitty?
The article recommends deleting any sensitive screenshots to protect against the SparkKitty Trojan and similar threats.