{"id":138218,"date":"2026-10-07T10:29:05","date_gmt":"2026-10-07T03:29:05","guid":{"rendered":"https:\/\/bitcoinvn.io\/insights\/?p=138218"},"modified":"2026-10-07T10:55:24","modified_gmt":"2026-10-07T03:55:24","slug":"sparkcat-steal-recovery-phrases","status":"publish","type":"post","link":"https:\/\/bitcoinvn.io\/insights\/sparkcat-steal-recovery-phrases\/","title":{"rendered":"SparkCat: How Malicious Apps Steal Wallet Recovery Phrases"},"content":{"rendered":"

Could an app downloaded from the App Store or Google Play put your crypto wallet at risk? SparkCat, a malware campaign publicly documented by Kaspersky in February 2025, showed how <\/span><\/i>malicious code embedded in seemingly legitimate apps<\/i><\/b> could search users\u2019 photos for wallet recovery phrases. Following Kaspersky\u2019s discovery, Google and Apple removed multiple infected apps from Google Play and the App Store, showing that even apps downloaded from official stores aren\u2019t always safe.<\/span><\/i><\/p>\n

Here\u2019s how SparkCat works and what wallet owners can learn from it.<\/span><\/i><\/p>\n

What is SparkCat?<\/b><\/h2>\n

SparkCat is information-stealing malware found in Android and iOS apps. It was embedded in software components used by the apps, including software development kits (SDKs). Some affected apps offered ordinary services, such as food delivery, while others appeared to have been created to lure victims.<\/span><\/p>\n

Once granted access to photos, SparkCat uses optical character recognition (OCR) – technology that reads text in images – to search accessible pictures and screenshots for wallet recovery phrases. Matching images are sent to the attackers, potentially giving them the information needed to access the affected wallets and steal their funds.<\/span><\/p>\n

\"A
A negative review of ComeCome on Apple\u2019s App Store warned about photo permissions. Source: Kaspersky.<\/figcaption><\/figure>\n

According to Kaspersky<\/span><\/a>, infected apps had accumulated more than 242,000 downloads on Google Play alone at the time of its analysis. That figure measures app downloads, not confirmed wallet thefts.<\/span><\/p>\n

\"Kaspersky
Kaspersky could not confirm whether developers added the malware deliberately or through a compromised component<\/figcaption><\/figure>\n

How the SparkCat malware works<\/b><\/h2>\n

1. Asking for photo access<\/b><\/h3>\n

When a user opens a feature such as a support chat, the infected app may request permission to access photos and screenshots.<\/span><\/p>\n

If permission is granted, SparkCat starts scanning the images the app is allowed to access. <\/span>Granting full photo access can expose the entire library.<\/b><\/p>\n

\"\"<\/p>\n

2. Scanning photos using OCR technology<\/b><\/h3>\n

SparkCat uses the text-recognition features in <\/span>Google ML Kit<\/b> to read text in photos – a process called optical character recognition (OCR).<\/span><\/p>\n

It looks for keywords and text patterns associated with wallet recovery phrases. Its search rules come from the attackers\u2019 command-and-control (C2) server and can be updated. The malware can recognise Latin, Chinese, Japanese and Korean characters, allowing it to search across multiple languages.<\/span><\/p>\n

3. Sending data to the attackers<\/b><\/h3>\n

Images that match the search criteria are uploaded to servers used by the attackers, along with information about the device and the text detected in the images.<\/span><\/p>\n

Kaspersky also identified a communication component written in Rust – an unusual choice for mobile apps – which complicated its analysis.<\/span><\/p>\n

4. Staying hidden<\/b><\/h3>\n

By requesting photo access during ordinary activities, such as opening a support chat, SparkCat makes the permission request appear routine.<\/span><\/p>\n

Behind the scenes, it uses encrypted configuration data, domain names resembling legitimate services and malicious components disguised as ordinary system software. Its code is also deliberately obscured – a technique called <\/span>obfuscation<\/b> – to make detection and analysis harder.<\/span><\/p>\n

Which apps were affected by SparkCat malware?<\/b><\/h2>\n

In February 2025, Kaspersky reported finding <\/span>SparkCat malware in 10 Android apps on Google Play and 11 iOS apps on Apple\u2019s App Store<\/b>. These included ComeCome, a food delivery service with infected versions on both platforms. The affected Android apps had collectively exceeded <\/span>242,000 downloads on Google Play<\/b> at the time of analysis.<\/span><\/p>\n

Other affected apps included messaging apps, news readers and crypto wallet utilities. Some appeared to offer legitimate services, while others – including several messaging apps claiming AI features – appeared to have been created to lure victims.<\/span><\/p>\n

\"There\u2019s
There\u2019s no free lunch in crypto, either. SparkCat spread through seemingly legitimate apps listed in official app stores<\/figcaption><\/figure>\n

Kaspersky assessed that the campaign targeted users in <\/span>Europe and Asia, potentially extending to other regions<\/b>. This assessment was based on the malware\u2019s search languages and dictionaries, alongside the countries served by affected apps.<\/span><\/p>\n

Search keywords supplied by the attackers\u2019 command-and-control (C2) servers included terms in Chinese, Japanese, Korean, English, Czech, French, Italian, Polish and Portuguese. These terms focused on wallet recovery phrases.<\/span><\/p>\n

\"Examples
Examples of messaging apps Kaspersky identified as carrying SparkCat on Apple\u2019s App Store. Source: Kaspersky<\/figcaption><\/figure>\n

Consequences & risks<\/b><\/h2>\n

SparkCat is especially dangerous if you keep photos or screenshots of your wallet recovery phrase (seed phrase) in your phone\u2019s gallery.<\/span><\/p>\n

First off – don\u2019t ever take pictures of your seed phrase!<\/span><\/p>\n

\"\"<\/p>\n

Use proper offline backup methods for your seed phrase – including tools such as <\/span>BitcoinVN\u2019s steel plates for seed-phrase backup<\/span><\/a> – to help keep your seed phrase safe even in the event of fire, flooding or other disasters.<\/span><\/p>\n

The malware\u2019s scanning rules could also be adapted to target other sensitive information captured in accessible photos and screenshots, including passwords and private messages.<\/span><\/p>\n

Beyond the documented SparkCat findings, AI tools could help criminals analyze stolen information, build profiles of potential victims and identify lucrative targets for scams or extortion.<\/span><\/p>\n

SparkCat\u2019s presence in Google Play and Apple\u2019s App Store shows that <\/span>store screening is not foolproof<\/b>. Seemingly ordinary permission requests and deliberately obscured code helped the malware operate unnoticed.<\/span><\/p>\n

There is a familiar saying in software engineering: <\/span>\u201cSoftware is a liability\u201d<\/b> – an idea echoed in Jeff Atwood\u2019s 2007 essay<\/span> The Best Code Is No Code at All<\/span><\/a> that has held up well for nearly two decades.<\/span><\/p>\n

The security lesson for users is straightforward: every additional app introduces something else you must trust. <\/span>If you don\u2019t need it – or have doubts about its safety – don\u2019t install it.<\/b><\/p>\n

Conclusion<\/b><\/h2>\n

If SparkCat could access a photo of your seed phrase, treat that phrase as compromised.<\/b> Using a clean device, promptly move any remaining funds to a newly created wallet with a <\/span>new seed phrase<\/b>. Deleting the infected app – or factory-resetting your phone – does not make an exposed seed phrase safe again.<\/span><\/p>\n

More generally, <\/span>keep private-key and seed-phrase backups offline.<\/b> Do not photograph them, store them on your phone or upload them to online services.<\/span><\/p>\n

Keep long-term crypto custody separate from everyday device use.<\/b> Use <\/span>dedicated hardware wallets<\/span><\/a> and keep your recovery backups offline.<\/span><\/p>\n

Reduce your attack surface by minimising the apps and software you install. <\/span>Do not blindly trust Google, Apple or other Big Tech companies to keep you safe.<\/b>\u00a0<\/span><\/p>\n

\"Keep
Keep your seed phrases offline<\/a> and protected<\/figcaption><\/figure>\n

Cybercriminals around the world are scheming right now to take everything they can from you and your loved ones. As the head of your household, <\/span>it is your responsibility to take the necessary precautions to protect your family.<\/b><\/p>\n

Prepare or perish – the choice is yours.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Could an app downloaded from the App Store or Google Play put your crypto wallet at risk? SparkCat, a malware campaign publicly documented by Kaspersky in February 2025, showed how malicious code embedded in seemingly legitimate apps could search users\u2019 photos for wallet recovery phrases. Following Kaspersky\u2019s discovery, Google and Apple removed multiple infected apps […]<\/p>\n","protected":false},"author":14,"featured_media":138219,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10528],"tags":[],"class_list":["post-138218","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersec-custody"],"yoast_head":"\nSparkCat: How Malicious Apps Steal Wallet Recovery Phrases - BV Insights<\/title>\n<meta name=\"description\" content=\"Crypto security alert: Discover how the SparkCat malware exploits malicious apps to steal wallet recovery phrases. Read now!\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/bitcoinvn.io\/insights\/sparkcat-steal-recovery-phrases\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SparkCat: How Malicious Apps Steal Wallet Recovery Phrases - BV Insights\" \/>\n<meta property=\"og:description\" content=\"Crypto security alert: Discover how the SparkCat malware exploits malicious apps to steal wallet recovery phrases. Read now!\" \/>\n<meta property=\"og:url\" content=\"https:\/\/bitcoinvn.io\/insights\/sparkcat-steal-recovery-phrases\/\" \/>\n<meta property=\"og:site_name\" content=\"BV Insights\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/facebook.com\/www.bitcoinvn.io\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-07T03:29:05+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-07T03:55:24+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/bitcoinvn.io\/insights\/wp-content\/uploads\/2026\/10\/SparkCat-1.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"420\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"lien\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@bitcoin_vietnam\" \/>\n<meta name=\"twitter:site\" content=\"@bitcoin_vietnam\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"lien\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/sparkcat-steal-recovery-phrases\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/sparkcat-steal-recovery-phrases\\\/\"},\"author\":{\"name\":\"lien\",\"@id\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/#\\\/schema\\\/person\\\/8b23287ffcb8cfc1d2329d17d10582d7\"},\"headline\":\"SparkCat: How Malicious Apps Steal Wallet Recovery Phrases\",\"datePublished\":\"2026-10-07T03:29:05+00:00\",\"dateModified\":\"2026-10-07T03:55:24+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/sparkcat-steal-recovery-phrases\\\/\"},\"wordCount\":1127,\"publisher\":{\"@id\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/sparkcat-steal-recovery-phrases\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/SparkCat-1.webp\",\"articleSection\":[\"CyberSec & Custody\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/sparkcat-steal-recovery-phrases\\\/\",\"url\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/sparkcat-steal-recovery-phrases\\\/\",\"name\":\"SparkCat: How Malicious Apps Steal Wallet Recovery Phrases - BV Insights\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/sparkcat-steal-recovery-phrases\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/sparkcat-steal-recovery-phrases\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/SparkCat-1.webp\",\"datePublished\":\"2026-10-07T03:29:05+00:00\",\"dateModified\":\"2026-10-07T03:55:24+00:00\",\"description\":\"Crypto security alert: Discover how the SparkCat malware exploits malicious apps to steal wallet recovery phrases. Read now!\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/sparkcat-steal-recovery-phrases\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/sparkcat-steal-recovery-phrases\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/sparkcat-steal-recovery-phrases\\\/#primaryimage\",\"url\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/SparkCat-1.webp\",\"contentUrl\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/SparkCat-1.webp\",\"width\":800,\"height\":420},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/sparkcat-steal-recovery-phrases\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"CyberSec & Custody\",\"item\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/category\\\/cybersec-custody\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"SparkCat: How Malicious Apps Steal Wallet Recovery Phrases\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/#website\",\"url\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/\",\"name\":\"BV Insights\",\"description\":\"News source for cryptocurrencies, Bitcoin, and blockchain in Vietnam\",\"publisher\":{\"@id\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/#organization\",\"name\":\"BitcoinVN\",\"alternateName\":\"Bitcoin Vietnam\",\"url\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/cropped-icon.png\",\"contentUrl\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/cropped-icon.png\",\"width\":512,\"height\":512,\"caption\":\"BitcoinVN\"},\"image\":{\"@id\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/facebook.com\\\/www.bitcoinvn.io\",\"https:\\\/\\\/x.com\\\/bitcoin_vietnam\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/#\\\/schema\\\/person\\\/8b23287ffcb8cfc1d2329d17d10582d7\",\"name\":\"lien\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/16d6cdb51e88a70d5d992905206e45d4c91dbdbc60ae682419ffae18e62ed6af?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/16d6cdb51e88a70d5d992905206e45d4c91dbdbc60ae682419ffae18e62ed6af?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/16d6cdb51e88a70d5d992905206e45d4c91dbdbc60ae682419ffae18e62ed6af?s=96&d=mm&r=g\",\"caption\":\"lien\"},\"url\":\"https:\\\/\\\/bitcoinvn.io\\\/insights\\\/author\\\/lienbvn\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"SparkCat: How Malicious Apps Steal Wallet Recovery Phrases - BV Insights","description":"Crypto security alert: Discover how the SparkCat malware exploits malicious apps to steal wallet recovery phrases. Read now!","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/bitcoinvn.io\/insights\/sparkcat-steal-recovery-phrases\/","og_locale":"en_US","og_type":"article","og_title":"SparkCat: How Malicious Apps Steal Wallet Recovery Phrases - BV Insights","og_description":"Crypto security alert: Discover how the SparkCat malware exploits malicious apps to steal wallet recovery phrases. Read now!","og_url":"https:\/\/bitcoinvn.io\/insights\/sparkcat-steal-recovery-phrases\/","og_site_name":"BV Insights","article_publisher":"https:\/\/facebook.com\/www.bitcoinvn.io","article_published_time":"2026-10-07T03:29:05+00:00","article_modified_time":"2026-10-07T03:55:24+00:00","og_image":[{"width":800,"height":420,"url":"https:\/\/bitcoinvn.io\/insights\/wp-content\/uploads\/2026\/10\/SparkCat-1.webp","type":"image\/webp"}],"author":"lien","twitter_card":"summary_large_image","twitter_creator":"@bitcoin_vietnam","twitter_site":"@bitcoin_vietnam","twitter_misc":{"Written by":"lien","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/bitcoinvn.io\/insights\/sparkcat-steal-recovery-phrases\/#article","isPartOf":{"@id":"https:\/\/bitcoinvn.io\/insights\/sparkcat-steal-recovery-phrases\/"},"author":{"name":"lien","@id":"https:\/\/bitcoinvn.io\/insights\/#\/schema\/person\/8b23287ffcb8cfc1d2329d17d10582d7"},"headline":"SparkCat: How Malicious Apps Steal Wallet Recovery Phrases","datePublished":"2026-10-07T03:29:05+00:00","dateModified":"2026-10-07T03:55:24+00:00","mainEntityOfPage":{"@id":"https:\/\/bitcoinvn.io\/insights\/sparkcat-steal-recovery-phrases\/"},"wordCount":1127,"publisher":{"@id":"https:\/\/bitcoinvn.io\/insights\/#organization"},"image":{"@id":"https:\/\/bitcoinvn.io\/insights\/sparkcat-steal-recovery-phrases\/#primaryimage"},"thumbnailUrl":"https:\/\/bitcoinvn.io\/insights\/wp-content\/uploads\/2026\/10\/SparkCat-1.webp","articleSection":["CyberSec & Custody"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/bitcoinvn.io\/insights\/sparkcat-steal-recovery-phrases\/","url":"https:\/\/bitcoinvn.io\/insights\/sparkcat-steal-recovery-phrases\/","name":"SparkCat: How Malicious Apps Steal Wallet Recovery Phrases - BV Insights","isPartOf":{"@id":"https:\/\/bitcoinvn.io\/insights\/#website"},"primaryImageOfPage":{"@id":"https:\/\/bitcoinvn.io\/insights\/sparkcat-steal-recovery-phrases\/#primaryimage"},"image":{"@id":"https:\/\/bitcoinvn.io\/insights\/sparkcat-steal-recovery-phrases\/#primaryimage"},"thumbnailUrl":"https:\/\/bitcoinvn.io\/insights\/wp-content\/uploads\/2026\/10\/SparkCat-1.webp","datePublished":"2026-10-07T03:29:05+00:00","dateModified":"2026-10-07T03:55:24+00:00","description":"Crypto security alert: Discover how the SparkCat malware exploits malicious apps to steal wallet recovery phrases. Read now!","breadcrumb":{"@id":"https:\/\/bitcoinvn.io\/insights\/sparkcat-steal-recovery-phrases\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/bitcoinvn.io\/insights\/sparkcat-steal-recovery-phrases\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/bitcoinvn.io\/insights\/sparkcat-steal-recovery-phrases\/#primaryimage","url":"https:\/\/bitcoinvn.io\/insights\/wp-content\/uploads\/2026\/10\/SparkCat-1.webp","contentUrl":"https:\/\/bitcoinvn.io\/insights\/wp-content\/uploads\/2026\/10\/SparkCat-1.webp","width":800,"height":420},{"@type":"BreadcrumbList","@id":"https:\/\/bitcoinvn.io\/insights\/sparkcat-steal-recovery-phrases\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/bitcoinvn.io\/insights\/"},{"@type":"ListItem","position":2,"name":"CyberSec & Custody","item":"https:\/\/bitcoinvn.io\/insights\/category\/cybersec-custody\/"},{"@type":"ListItem","position":3,"name":"SparkCat: How Malicious Apps Steal Wallet Recovery Phrases"}]},{"@type":"WebSite","@id":"https:\/\/bitcoinvn.io\/insights\/#website","url":"https:\/\/bitcoinvn.io\/insights\/","name":"BV Insights","description":"News source for cryptocurrencies, Bitcoin, and blockchain in Vietnam","publisher":{"@id":"https:\/\/bitcoinvn.io\/insights\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/bitcoinvn.io\/insights\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/bitcoinvn.io\/insights\/#organization","name":"BitcoinVN","alternateName":"Bitcoin Vietnam","url":"https:\/\/bitcoinvn.io\/insights\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/bitcoinvn.io\/insights\/#\/schema\/logo\/image\/","url":"https:\/\/bitcoinvn.io\/insights\/wp-content\/uploads\/2023\/07\/cropped-icon.png","contentUrl":"https:\/\/bitcoinvn.io\/insights\/wp-content\/uploads\/2023\/07\/cropped-icon.png","width":512,"height":512,"caption":"BitcoinVN"},"image":{"@id":"https:\/\/bitcoinvn.io\/insights\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/facebook.com\/www.bitcoinvn.io","https:\/\/x.com\/bitcoin_vietnam"]},{"@type":"Person","@id":"https:\/\/bitcoinvn.io\/insights\/#\/schema\/person\/8b23287ffcb8cfc1d2329d17d10582d7","name":"lien","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/16d6cdb51e88a70d5d992905206e45d4c91dbdbc60ae682419ffae18e62ed6af?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/16d6cdb51e88a70d5d992905206e45d4c91dbdbc60ae682419ffae18e62ed6af?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/16d6cdb51e88a70d5d992905206e45d4c91dbdbc60ae682419ffae18e62ed6af?s=96&d=mm&r=g","caption":"lien"},"url":"https:\/\/bitcoinvn.io\/insights\/author\/lienbvn\/"}]}},"_links":{"self":[{"href":"https:\/\/bitcoinvn.io\/insights\/wp-json\/wp\/v2\/posts\/138218","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bitcoinvn.io\/insights\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bitcoinvn.io\/insights\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bitcoinvn.io\/insights\/wp-json\/wp\/v2\/users\/14"}],"replies":[{"embeddable":true,"href":"https:\/\/bitcoinvn.io\/insights\/wp-json\/wp\/v2\/comments?post=138218"}],"version-history":[{"count":2,"href":"https:\/\/bitcoinvn.io\/insights\/wp-json\/wp\/v2\/posts\/138218\/revisions"}],"predecessor-version":[{"id":138231,"href":"https:\/\/bitcoinvn.io\/insights\/wp-json\/wp\/v2\/posts\/138218\/revisions\/138231"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bitcoinvn.io\/insights\/wp-json\/wp\/v2\/media\/138219"}],"wp:attachment":[{"href":"https:\/\/bitcoinvn.io\/insights\/wp-json\/wp\/v2\/media?parent=138218"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bitcoinvn.io\/insights\/wp-json\/wp\/v2\/categories?post=138218"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bitcoinvn.io\/insights\/wp-json\/wp\/v2\/tags?post=138218"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}