### Overview
The attackers have installed multiple backdoors to ensure continued access and control over the compromised systems.

### Details
- **Backdoor Types**: Custom RATs detected, allowing remote command execution.
- **Installation Method**: Leveraged administrative privileges obtained from initial breach.

### Next Steps
With persistence achieved, the threat actors are expected to attempt lateral movement to spread through critical infrastructure. Monitoring lateral traffic and securing adjacent systems is crucial.