When a Trusted Support Tool Becomes the Trap

A credential-free-looking install flow can turn a legitimate remote support product into an attacker-controlled foothold, with the session blending into normal IT activity.