Check Point identified SparkKitty malware hidden in mobile apps that scans photos to steal cryptocurrency wallet recovery phrases.