Several harmful apps, available on the Google Play Store and Apple App Store, have been found to secretly steal cryptocurrency wallet recovery phrases.