SparkKitty Spyware Campaign — Campaign Analysis & Threat Activity

Overview

SparkKitty Spyware Campaign has been mentioned in coverage of GlassWorm’s shift to macOS, highlighting hardware wallet Trojan capabilities. This spyware operation appears to target macOS users and cryptocurrency wallets, signaling a notable shift toward macOS-focused espionage and wallet data theft.

Related Threat Clusters

• New GlassWorm Malware Targets macOS Developers with Trojanized Crypto Wallets

  A fourth wave of the GlassWorm campaign is targeting macOS developers by distributing malicious VSCode/OpenVSX extensions that contain trojanized versions of crypto wallet applications. These extensions are available in…

  7 articles · Updated January 1, 2026

Recent Intelligence Reports

• GlassWorm Malware Evolves to Target macOS Systems with Hardware Wallet Trojans — Technadu · January 2, 2026

Related Entities