"It uses the API to establish a covert command-and-control (C2) channel, primarily through the AirWatch feature to manage custom device attributes and ... a fresh set of attacks exploiting an ...