Auto-color granted its operators full access to compromised endpoints, allowing them to run malware remotely, and more.