Using the access to virtual machines the attackers employed malicious use of the Serial Console on Azure Virtual Machines to install third-party remote management software within client environments.
If you lose RDP access due to an incorrect Azure VM Firewall configuration, choose a recovery path in the following order: ...