Darlington and Stockton Times
·Aug 2026
Apple and Android Users Warned of Fake Apps Stealing Details
Researchers have identified SparkKitty, malware hidden in fake Android and iOS apps, including the iOS app 币coin and the Android app SOEX, which was downloaded more than 10,000 times before removal from Google Play. The malware requests access to photo galleries, scans images and screenshots for passwords, financial details and QR codes, and uploads extracted data and device metadata to remote servers. Variants have also spread through third-party stores, sideloaded APKs and modified apps, while rooted Android devices may be compromised through Xposed modules. Users are advised to be cautious when downloading apps, including from official stores.