Kaspersky researchers have discovered a new Trojan spy called SparkKitty which targets smartphones on iOS and Android. It sends images from an infected phone and information about the device to the attackers.

This malware was embedded in apps related to crypto and gambling, as well as in a trojanised TikTok app, and was distributed on App Store and Google Play, as well as on scam websites.

Experts suggest that the goal of the attackers is to steal cryptocurrency assets from residents of Southeast Asia and China. Users in Nigeria are also potentially at risk of facing a similar cyber threat.

Kaspersky has notified Google and Apple about the malicious apps. Certain technical details suggest that the new malware campaign is linked to the previously discovered SparkCat Trojan — malware (the first of its kind on iOS) with a built-in optical character recognition (OCR) module that allows it to scan image galleries and steal screenshots containing cryptocurrency wallet recovery phrases or passwords. The SparkKitty case is the second time in a year that Kaspersky researchers have found a Trojan stealer on App Store, following SparkCat.

iOS

On App Store, the Trojan pretended to be an app related to cryptocurrencies — 币coin. On phishing pages mimicking the official iPhone App Store, the malware was distributed under the guise of TikTok and gambling applications.

“One of the vectors for the Trojan’s distribution turned out to be fake websites where the attackers tried to infect the victims’ iPhones. iOS has several legitimate ways to install programs not from the App Store. In this malicious campaign, the attackers used one of them — special developer tools for distributing corporate business applications.

In the infected version of TikTok, during authorisation, the malware, in addition to stealing photos from the smartphone gallery, embedded links to a suspicious store in the person’s profile window. This store only accepts cryptocurrencies, which increases our concerns about it,” explains Sergey Puzan, a malware expert at Kaspersky.

Android

The attackers targeted users both on third-party websites and on Google Play, passing off the malware as various crypto services. For example, one of the infected applications — a messenger called SOEX with a cryptocurrency exchange function — was downloaded from the official store over 10,000 times.

Experts also found APK files of infected apps (these can be installed directly on Android smartphones bypassing official stores) on third-party websites that are likely related to the detected malicious campaign. They are positioned as investment crypto projects. The websites on which these applications were posted were advertised on social networks, including YouTube.

“After the apps were installed, they functioned as promised in their description. But at the same time, photos from the smartphone gallery were sent to the attackers. The attackers may later try to find various confidential data in the images, for instance, crypto wallet recovery phrases to access the victims’ assets.

There are indirect signs that the attackers are interested in people’s digital assets: many of the infected apps were related to crypto, and the trojanised TikTok app also had a built-in store that accepted payment for goods only in crypto,” comments Dmitry Kalinin, a malware expert at Kaspersky.

In a new report, Kaspersky identified over 7 million compromised accounts belonging to streaming services like Netflix, Disney+, Amazon Prime Video and others. For millions of Gen Z users, these streaming platforms play a central role in how this generation socialises and connects with global culture.

To raise their awareness and build digital resilience, Kaspersky has launched “Case 404” — an interactive cyber-detective game that helps Gen Z recognise hidden dangers and learn how to protect their digital lives.

Streaming platforms have become digital sanctuaries for Gen Z. According to recent studies, Gen Z not only spends more on streaming platforms than any other generation but also actively participates in online fandoms, sharing clips, memes and fan theories across social media: episodes become memes, quotes turn into tweets, and characters live on through edits, debates, and TikTok trends.

Yet this always-online, highly engaged behaviour comes with hidden risks. The very devices Gen Z uses to stream their favourite shows can become entry points for cybercriminals through malware infections. These threats often hide in unofficial downloads, pirated content, browser extensions, or compromised apps, silently collecting login credentials, session data, and other personal information.

Kaspersky Digital Footprint Intelligence team analysed compromised credentials linked to the major streaming services (Netflix, Disney+, Amazon Prime Video, Apple TV+ and Max) and uncovered 7,035,236 cases in 2024. These weren’t stolen directly from the platforms themselves but were collected as part of broader credential theft campaigns.

Netflix: A major target for cybercriminals

It’s no surprise that Netflix is the defining streaming brand for Gen Z. Netflix leads both in popularity and in exposure, with 5,632,694 compromised accounts detected. Brazil had the highest number of exposed Netflix credentials in 2024, followed by Mexico and India.

Disney+

Kaspersky experts detected 680,850 Disney+ accounts in leaked datasets. Again, Brazil stood out as the country with the most breached accounts, followed by Mexico and Germany.

Amazon Prime Video

Amazon Prime Video, though smaller in volume with 1,607 compromised accounts, still plays a significant role, especially among Gen Z viewers looking for more subversive or edgy narratives. In 2024, Mexico, Brazil, and France were the top countries with leaked Prime Video accounts.

Once a device is infected, cybercriminals don’t stop at the streaming app. Malware collects sensitive data — account credentials, cookies, bank card details — which are then sold or leaked on underground forums. Sometimes, attackers give this data away just to build their reputation.

These forums are active, fast-moving, and accessible to a wide range of malicious actors. What begins as a compromised Netflix password can quickly snowball into broader digital intrusion, identity theft, or financial fraud, especially if the same credentials are reused across services.

As streaming platforms, fandom culture, and social media become deeply woven into Gen Z’s everyday experience, cyberthreats are adapting to target the spaces they trust most. To respond to this shift, Kaspersky has created “Case 404” — an interactive cybersecurity game explicitly tailored for Gen Z users.

In this digital quest, players step into the role of AI-powered cyber-detectives, investigating realistic online crimes inspired by current threats. Upon completing all cases, users receive a discount on Kaspersky Premium, turning new knowledge into actionable protection.

“For Generation Z, streaming is more than entertainment; it’s a daily habit, a source of identity and community. But that emotional connection also creates a blind spot. Malware hidden in unofficial downloads or third-party tools silently steals login credentials and personal data, which are then traded or sold on cybercriminal forums.

Protecting your streaming account today means thinking beyond passwords — it means securing your devices, avoiding suspicious downloads, and being mindful of where your clicks lead you,” comments Polina Tretyak, digital footprint analyst at Kaspersky.

In a powerful stride towards an inclusive digital future, the National Information Technology Development Agency (NITDA) is spearheading a transformative drive to empower Nigerian women in the Artificial Intelligence (AI) and digital economy.

This commitment was resoundingly reiterated by NITDA’s Director General, Kashifu Inuwa CCIE, at the “Innovate Her 25” conference, the 10th National Conference and 11th Annual Meeting of Nigerian Women in Information Technology.

Speaking at the event themed “Women in AI: Unlocking Resilience, Fostering Innovation and Leadership,” Inuwa, represented by Dr. Aristotle Onumo, Director of Stakeholder Management and Partnerships, emphasised that true innovation blossoms not in isolation, but through synergistic partnerships and collective endeavor – principles deeply embedded in NITDA’s operational ethos.

Highlighting Nigeria’s Artificial Intelligence (AI) Strategy, Inuwa added that inclusivity is embedded as a core objective: “Our strategic roadmap mandates that at least 40% of our programmes directly benefit women and underserved groups. We have also developed a Gender Inclusion Strategy to guide interventions in areas such as training and infrastructure,” he explained.

Further underscoring Nigeria’s leadership in the digital space, Inuwa excitingly announced that in September 2025, NITDA will proudly host a Leadership Summit on AI. This landmark event will convene stakeholders from across the African continent, fostering a collaborative environment to forge a unified AI vision for Africa.

In alignment with the conference’s focus on empowering women in technology, the DG detailed NITDA’s diverse capacity-building initiatives spanning AI, cloud computing, and cybersecurity. “We work with partners such as the Renew Hope Initiative to train thousands of women across Nigeria’s six geopolitical zones,” he revealed, highlighting the agency’s broad reach.

NITDA stands ready to collaborate with organisations like the Nigerian Women in Information Technology (NIWIT), actively encouraging proposals for bespoke programmes that cater to specific community needs. “We focus on targeted training with measurable outcomes, rather than generic approaches,” Inuwa affirmed, emphasising a results-oriented methodology.

He further spotlighted NITDA’s “Digital Literacy for All Initiative,” which seeks to equip 70% of Nigerians with digital literacy by 2027. Through strategic partnerships with the NYSC and the integration of digital literacy into national school curricula, the agency plans to train over 30 million Nigerians — with a dedicated focus on underserved communities and public servants.

Addressing critical concerns surrounding ethical AI, Inuwa emphasised the importance of developing indigenous datasets and large language models reflective of Nigeria’s unique realities: “We are working closely with stakeholders to build local datasets that safeguard Nigerians’ digital rights and ensure ethical AI use,” he assured.

NITDA is also championing mentorship for women in technology through impactful initiatives such as Women Innovate. The agency warmly welcomes collaboration with NIWIT to design structured mentorship programmes and is open to formalising such partnerships through Memoranda of Understanding (MoUs).

“NITDA is committed to fostering inclusive economic growth through innovation. Partnership and collaboration remain the way forward,” Inuwa declared.

The session concluded with a resounding call to action, urging women-focused organisations to leverage NITDA’s open-door policy and unite in advancing digital inclusion across Nigeria. The future of Nigeria’s digital economy is inclusive, and women are at its forefront.