Obviously I don’t know what I’m talking about, but it seems like such attack is only undetectable by cold gps device that has been offline for longer than some period of time, long enough to explain time shift by clock drift.