SecureList recently published a study of Android and iOS apps that have been laced with a malicious software development kit (SDK) dubbed “SparkCat” that steals crypto wallet recovery phrases.