SparkKitty infiltrates phones disguised as encryption tools and chat apps, then uses OCR to scan wallet recovery phrases in photo albums