The operation escalates as analysts identify persistence mechanisms employed by the Protux backdoor, designed to survive system reboots and evade detection. A suspicious file was detected which indicates a possible persistence mechanism used by the Protux malware.