We are pleased to announce that the Quark Drainer has gained a set of new features that allow it to effectively bypass transaction simulators such as WalletGuard and Pocket Universe.
This is achieved by overriding the request to redirect the target's RPC calls and hiding the current interaction from targeted anti-phishing tools. This can render transaction simulators ineffective as a defense against Quark Drainer in such scenarios, as these tools will not be able to detect the drainer unless the domain of the phishing site is explicitly blacklisted.
Another method used to bypass the security measures of wallet protection tools such as BlockAid is to generate untagged contract addresses if the value of the stolen assets exceeds a predetermined minimum threshold. This approach is effective because it differs from the typical approach of simply simulating a pending transaction. Instead, BlockAid checks to see if a known malicious address is involved in the transaction.
This is achieved by overriding the request to redirect the target's RPC calls and hiding the current interaction from targeted anti-phishing tools. This can render transaction simulators ineffective as a defense against Quark Drainer in such scenarios, as these tools will not be able to detect the drainer unless the domain of the phishing site is explicitly blacklisted.
Another method used to bypass the security measures of wallet protection tools such as BlockAid is to generate untagged contract addresses if the value of the stolen assets exceeds a predetermined minimum threshold. This approach is effective because it differs from the typical approach of simply simulating a pending transaction. Instead, BlockAid checks to see if a known malicious address is involved in the transaction.
![[Image: QD-Signature-s.gif]](https://patched.to/pbb-proxy/UUNCQ0JeTUoNGVgHA0taWklRKgRbak9vHGIlHTVZUQtYQ0NBVEkRSwNeVw--/QD-Signature-s.gif)