SparkKitty malware reached Apple’s App Store and Google Play, including an Android app downloaded more than 10,000 times. The malware scanned infected Android and iPhone photo libraries for wallet recovery phrases and sensitive information.