Google Threat Intelligence has discovered a cryptocurrency-stealing malware called "Ghostblade," part of the "DarkSword" toolkit, primarily targeting Apple iOS devices. It can steal cryptocurrency private keys and sensitive data. The malware is written in JavaScript and, once activated, rapidly collects data and sends it to attacker servers before shutting down to reduce detection probability. Ghostblade can access iMessage, Telegram, and WhatsApp communications data, and steal SIM information, identity data, media files, and geolocation data. (Cointelegraph)