An unauthorized script has been detected executing on a workstation, which is indicative of a trojan activation attempting to establish a covert communication channel with a command and control server operated by the RTM Group. This activity is associated with financial transaction monitoring.