One more path for malware is that the system has a root hole and this is where the exploit hides the malware.

Or a hostile actor gets their hands on an unencrypted hard drive and installs this when the owner isn’t looking.