HeptaX Cyberespionage Campaign Snoops Through Unauthorized RDP Connections

The attackers heavily rely on PowerShell and BAT scripts to download additional payloads and create an administrative user account on compromised systems, lowering authentication barriers for unauthorized remote access.