v1 → v2
Scores
trust_score0 → 0
severity_base— → —
score_modifier0 → 0
Sections
Threat Overview → Identification and Classification
unchanged
Cryptocurrency and Wallet Targeting → Crypto Wallet and Exchange Targeting
unchanged
Technical Capabilities: Credential Theft → Invisible Overlay Keystroke Capture and Accessibility-Service Replay
unchanged
Technical Capabilities: Device Takeover and Surveillance → Device Takeover, Remote Control, and Lock-Screen Secret Theft
unchanged
Novel Offline Exfiltration: Wi-Fi Mesh Relay → Offline Wi-Fi/Bluetooth Mesh Exfiltration
unchanged
Geographic Targeting and Scope
unchanged
Distribution and Indicators of Compromise → Distribution and Google Play Store Status
unchanged
Anti-Analysis and Evasion Techniques → Development Timeline and Ongoing Evolution
unchanged
Affected Parties and Victim Profile → (section 9)
unchanged
Current Status and Mitigation → (section 10)
unchanged
Timeline events
+ added2026-02 — (no description)
+ added2026-05 — (no description)
+ added2026-07 — (no description)
+ added2026-08-20 — (no description)
+ added2026-08 — (no description)
- removed2026-02-01 — (no description)
- removed2026-03-01 — (no description)
- removed2026-05-01 — (no description)
- removed2026-07-24 — (no description)
- removed2026-08-22 — (no description)
~ changed2026-07-13: “” → “”
Accepted submissions
No changes to accepted submissions.
Each version is bound to the decision event that created it. Verify the chain anchor for either via the audit log.
v1 hash: bb7f5ef3366ad0ae039bcf0a093610165f4926954968069f70fa1be827ca72f9
v2 hash: bc864379292b994ef5903d913e346b6cdde1dbf36b98403d2934547aec6feb7c