“The funny thing is that this is effectively a keylogger that does not run any code on the CPU while it is running.”
Your laptop has more computers in it than you think. The keyboard controller and the WiFi chip each run their own 8051 firmware. Patch both and the keystrokes go from one to the other and out to the network. The main CPU never sees it, so your antivirus never does either.