Fake crypto and TikTok apps are being used to spread SparkKitty spyware on Android and iOS, silently stealing user photos and device data.