OTX Threat: YuanKong RAT: the Android remote-control service that stamps its operators' names into every build

YuanKong is a multi-tenant Android remote access trojan whose dropper stores decryption keys in cleartext configuration files. The malware uses a two-key XOR scheme to unpack payloads signed with a shared certificate across all operator builds. Each build embeds operator account identifiers as hardcoded string constants, including account IDs, operator handles, and enrollment codes that are transm