KeyBoy APT group utilized stolen credentials to exploit Remote Desktop Protocol (RDP) for lateral movement across the network. The activity was detected targeting media organizations and NGOs, with the objective of gaining control over additional systems.