Hackers Abuse Legitimate RMM Tools to Maintain Persistent Access and Evade Detection