SPARKKITTY SWIPES PICS FROM IOS, ANDROID DEVICES

Summary from the TLDR InfoSec newsletter

SparkKitty is a new mobile malware that harvests photos from users' devices. The malware is delivered via fake or trojanized applications on the App Store and a trojanized version of the TikTok app that users are prompted to install via an Enterprise profile. Once installed, the apps prompt users to grant the app access to their galleries and then exfiltrate images to extract crypto seed phrases.