Huawei+xloader _best_
This technique, dubbed allows XLoader to evade traditional antivirus because the malicious thread is running inside a whitelisted, signed Huawei binary.
The lesson is grim: In the world of cybercrime, no flag is sacred. Whether you are a Huawei loyalist or a Western detractor, the malware does not care about your politics. It only cares that your device is connected—and that you trust an update that says "Huawei." huawei+xloader
