New malware known as SparkKitty has been discovered by researchers at Kaspersky on both Android and iOS devices. Learn more in Zimperium’s 2026 Global Mobile Threat Report: https://t.co/kExDZJz38f pic.twitter.com/UQTnfAfz0X — Zimperium (@Zimperium) July 29, 2026The fake Apple and Android apps to avoidSparkKitty was found hidden inside trojanized apps listed on the Apple App Store and Google Play Store, including one called “币coin” on iOS, according to Check Point Exposure Management. On Android devices, SparkKitty was distributed through an app named “SOEX,” which was downloaded more than 10,000 times before it was removed from the Google Play Store. Additional variants of the malware were spread through third-party stores, sideloaded APKs (Android Package Kits), and modified versions of popular apps, including TikTok clones and gambling platforms. On rooted Android devices, it employed Xposed framework modules to maintain long-term control and avoid detection.