The improved version of SparkCat for Android incorporates several obfuscation layers compared to previous iterations, including the use of code virtualization and cross-platform programming languages to sidestep analysis efforts.
The victim, identified in court documents only as T.M., received an unsolicited letter at their home address in September 2025. The letter appeared to come from Ledger Security and Compliance and instructed the recipient to complete a mandatory security review of their Ledger hardware wallet.
"Earlier today, a malicious actor gained unauthorized access to Drift Protocol through a novel attack involving durable nonces, resulting in a rapid takeover of Drift's Security Council administrative powers."
