As the article points out though, they may have used that temporary access to your systems to leverage more permanent access. (And of course if the machine you

As the article points out though, they may have used that temporary access to your systems to leverage more permanent access. (And of course if the machine you're connecting from has an sshd listening then there's a good chance they could successfully connect back to it using your agent forwarding, then subvert the agent itself)