I wonder if this is the same group which targeted the other remote desktop service a few weeks ago?