MoqHao evolution: New variants start automatically right after installation

> McAfee analysis of the MoqHao (Roaming Mantis) Android malware describes an active smishing campaign that installs apps which auto-execute without user launch, abuses Android install-time uniqueness checks and Unicode app names to evade detection, uses social engineering to set default SMS handling, retrieves phishing content from Pinterest, communicates with a WebSocket C2 offering extensive commands (exfiltrate SMS/contacts/photos, control device state), and includes multiple SHA256 and package-name IOCs.