SparkCat SDK steals crypto wallet recovery phrases through OCR technology, infecting apps on Google Play and App Store.