A fresh module aims to compromise remote desktop accounts to access corporate resources.
Source: Threadpost