## Overview

The persistence stage of the attack was marked by the installation of the Pirpi backdoor. This malware is critical for maintaining access to compromised systems.

## Technical Details

- **Installation Method**: Installed as a service, ensuring it runs with system privileges.
- **Capabilities**: Allows remote command execution, file transfers, and further malware deployment.

## Impact

With the backdoor installed, the attackers can now attempt to access credentials, escalating their control over the network infrastructure.