Legitimate remote-desktop software abused for interactive access.
Read the full analysis on IntelFusions