Ammyy Admin manipulates the router’s NAT and state table to such an extent that the router becomes an unwilling participant in the remote session. For the end-user, the distinction is academic—the result (unauthenticated remote access through the perimeter) is identical to a compromised router.