While Huawei phones do not typically ship with the "xLoader" virus, the risk environment for Huawei users has shifted due to trade sanctions.

: Usually spread through phishing emails or SMS messages containing malicious links or attachments.

Newer versions hide their command-and-control (C2) servers behind social media profiles like Twitter or Instagram to stay under the radar of security researchers.