Exposed Remote Desktop Protocol Actively Targeted by Threat Actors to Deploy Ransomware

Originally published by Cyble on December 2, 2022. Cyble Global Sensors Intelligence and Darkweb findings show TAs actively targeting RDP Cyble Research and Intelligence Labs (CRIL) discovered multiple ransomware groups targeting open Remote Desktop Protocol (RDP) ports. RDP allows users to access and control remote computers over a network connection. It is commonly used by businesses to enable remote access to corporate networks. However, if an RDP port is left exposed on the internet, it c...

access businesses computers control corporate cril cyble darkweb december desktop enable exposed findings global intelligence labs network networks port ports protocol ransomware ransomware groups rdp remote access remote desktop remote desktop protocol research sensors targeting threat threat actors