Unit 42 says attackers are posing as helpdesk staff and persuading employees to hand over remote control before dropping ...