misp-galaxy:threat-actor="TA505",misp-galaxy:backdoor="ServHelper",misp-galaxy:rat="FlawedGrace",tlp:white,circl:incident-classification="malware",osint:source-type="blog-post",veris:action:malware:variety="Backdoor",ms-caro-malware:malware-type="RemoteAccess"