The state-sponsored threat actor deployed kernel implants and passive backdoors enabling long-term, high-level espionage.