Cyber criminals are aware of behavioral profile evasion techniques that have been successfully executed by cyber criminals. Real behavioral profiling is focused on identifying a potential criminal, while computer behavioral profiling systems focus on identifying normal user patterns. Using malware with Remote Desktop Protocol (RDP/VNC), the attacker mimics the account holders typical transaction amounts. These are easily viewed from a transaction history screen. Using an automatic script to transfer funds to predefined mule accounts, this approach also includes the presence of malware.”]
Source: https://securityintelligence.com/behavioral-profiling-finding-man-wasnt/