Malware
MoqHao
aka Shaoye · Wroba · XLoader
MoqHao, also called Wroba and XLoader (not to be confused with the malware of the same name for Windows and macOS), is an Android-based mobile threat that is associated with a financially motivated Ch
MoqHao, also known as Shaoye, Wroba, XLoader, is a Android malware family operated by Yanbian Gang.
Background
Tracked under the names Wroba and XLoader (distinct from the unrelated Windows and macOS malware that shares the XLoader name), MoqHao is an Android mobile threat tied to Roaming Mantis, a financially driven Chinese actor. It masquerades as the device's default SMS app and combines dropper and banking-trojan functionality.
Source: Malpedia (Fraunhofer FKIE).