### Overview
With systems disrupted by malware, the attackers installed a backdoor to maintain persistent access. This report explores the backdoor's characteristics and its implications for network security.

### Backdoor Details
The backdoor, identified as 'BLINDINGCAN', enabled remote access and control over compromised systems. It was hidden within legitimate processes to avoid detection.

### Persistence Mechanism
The backdoor leveraged Windows Task Scheduler to ensure it reactivated upon system reboot, maintaining attacker access indefinitely.

### Mitigation
- Regularly review scheduled tasks for anomalies.
- Implement network segmentation to limit lateral movement.