Please find a link to a recent CERT NZ advisory - for anyone who has an interest in this area who might find it useful.
https://www.cert.govt.nz/it-special...mpaign-leveraging-remote-access-technologies/
https://www.cert.govt.nz/it-special...mpaign-leveraging-remote-access-technologies/