Kaspersky experts have discovered a new virus known as SparkCat, spreading on the App Store and Google Play. This malware can infiltrate seemingly safe apps and has the capability to extract information from images and text stored in the device’s gallery, enabling access to sensitive data like passwords and credit card details without the user’s awareness.
Summary of essential information.
- SparkCat is distributed through counterfeit apps that appear to be genuine services.
- The virus employs AI to scan text within images and extract passwords from screenshots.
- Detecting common permission requests is challenging and can impact users globally.
Users are frightened by the SparkCat Virus.
SparkCat operates covertly by requesting access to the photo gallery, a common practice among many legitimate apps, and utilizes an OCR system to detect keywords like usernames and passwords. Once it deciphers the information, it promptly transmits it to the wrongdoers.
The virus has been detected in various types of apps, including messaging apps, delivery services, and AI assistants, posing a significant threat to users who may not realize they are in danger until it’s too late.
Researcher Dmitry Kalinin cautioned that detecting this virus is very challenging due to the lack of noticeable symptoms, allowing it to remain undetected on the device for extended periods and gather information without the victim’s knowledge.
SparkCat primarily targets users from Europe, Asia, and the United Arab Emirates, but it has also been detected in other regions, including Portuguese-speaking countries. The virus poses a threat to any user who stores passwords or financial data in screenshots due to its ability to recognize multiple languages.
The expert advises against downloading unfamiliar apps, checking app permissions, and ensuring that the antivirus on your mobile device is up to date. It is also suggested to reconsider the habit of storing important information in hard copies to avoid falling prey to SparkCat.