A long-running espionage backdoor has been observed in Windows form, with transport flexibility and kernel-level stealth that can complicate routine detection.