A suspicious software installation was detected on an endpoint within the network. The RTM Group has successfully infiltrated the financial institution's network by embedding their trojan in a popular accounting software update. This action was aimed at deceiving users into granting initial access.