China's Apple App Store infiltrated by crypto-stealing wallet apps

2026-04-22

Kaspersky discovered the SparkKitty operation deployed 26 malicious apps in the Chinese Apple App Store, masquerading as games to bypass restrictions before sideloading trojanized MetaMask, Coinbase, and Ledger wallet interfaces that silently exfiltrated seed phrases and drained victim assets.