Legitimate remote-access software abused for persistent access during intrusions.
Read the full analysis on IntelFusions