If you look at the disassembly in the link, the backdoor was inserted smack in the middle of the authentication function, which caused jump labels further down to change.
This is all trivial for a compiler to adjust, but it's not what someone manually tampering with the binary would do.
This is all trivial for a compiler to adjust, but it's not what someone manually tampering with the binary would do.