: It uses a broadcast receiver mechanism that automatically restarts its malicious services if the user or the OS attempts to stop them.