The attackers have installed a sophisticated backdoor to ensure sustained access to the compromised network. This backdoor allows them to maintain presence even if initial malware is detected and removed.