Kaspersky exposed SparkCat malware, which stole crypto recovery phrases via fake apps. Up to 242,000 users were infected before removal.