Huawei+xloader [work] Now

Before the main operating system or even the recovery mode can start, the hardware must be woken up. XLoader sets up the DRAM (RAM) and storage controllers so that larger programs can be loaded into memory.

Historically, XLoader spreads via phishing emails with malicious macros or fake software cracks. But recently, a new distribution vector has emerged: huawei+xloader