Upon opening the malicious attachment, the Elise backdoor is activated, establishing a covert communication channel with Lotus Blossom's command and control servers. This step allows the attackers to execute further malicious actions within the compromised system.