Researchers say the behavior amounts to a persistent backdoor.