Last mentioned: Mar 21, 2026
Mitigation Phase
Security experts recommend users audit their mobile wallet permissions and update iOS devices.
Industry Alert
Security news outlets begin reporting on the specific risks to iOS users.
Initial Discovery
Google Threat Intelligence flags Ghostblade as a new crypto-stealing threat.
Family Identification
Researchers link Ghostblade to the existing DarkSword malware lineage.
Google Threat Intelligence has identified 'Ghostblade,' a sophisticated crypto-stealing malware targeting Apple's iOS ecosystem. Linked to the DarkSword malware family, this discovery highlights an escalating threat to mobile-first cryptocurrency users on platforms previously considered highly secure.
This page surfaces every story mentioning iOS across our crypto coverage. We track each entity's appearance over time so readers can trace how the narrative evolves — which developments are isolated incidents, which build into longer arcs, and which reframe how operators in the space think about the entity. Story selection uses the same multi-source verification gate applied across the rest of our coverage.
Read our editorial methodology for how we identify, deduplicate, and score entity references. Our glossary defines the technical terms used across stories on this page, and our trends index contextualizes individual developments against the longer-running crypto beat. Cross-entity comparisons live on our compare view.
| What you see | What it tells you |
|---|---|
| Story count | Number of distinct stories where iOS was a primary or referenced actor. |
| Recency clustering | Whether mentions are concentrated in a recent window (a news cycle) or distributed (a sustained arc). |
| Sentiment distribution | Aggregate sentiment of the stories mentioning this entity, weighted by impact score. |
| Cross-niche links | When the same entity surfaces in our sibling networks, we link to those views to enrich context. |