McAfee’s discovery of the malware, dubbed Xamalicious, reveals a sophisticated attack strategy. These apps, built using Xamarin, a .NET framework, have been lurking undetected, exploiting the complexities of APK file build processes. The malware authors have skillfully combined obfuscation techniques and custom encryption to evade detection while exfiltrating data and communicating with their command-and-control servers.