Google Threat Intelligence said Ghostblade is a JavaScript-based iOS malware tied to the DarkSword campaign that targets private keys and other sensitive information on compromised iPhones. In addition to scanning crypto-related apps and services, Ghostblade can access iMessage, Telegram, WhatsApp, SIM data, identity information, multimedia, location, and system settings. Separately, Nominis reported that crypto hack losses in February fell to $49 million from $385 million in January.