ms-caro-malware:malware-type="RemoteAccess",enisa:nefarious-activity-abuse="remote-access-tool",veris:asset:variety="S - Remote access",veris:action:misuse:vector="Remote access",ms-caro-malware-full:malware-type="RemoteAccess",CERT-XLM:malicious-code="spyware-rat",type:OSINT,osint:lifetime="perpetual",osint:certainty="50",tlp:white,misp-galaxy:threat-actor="TA2541",circl:incident-classification="phishing"