Ransomware Attacks Using RDP as the Attack Vector – Detected by EDR

A remote desktop service refers to the feature that allows remote control of other PCs. In Windows, this service is provided by default through Remote Desktop Protocol (RDP). This means that if the target system is a Windows environment, RDP can be used to control this remote target without having to install additional remote control tools.

For remote control, the operator is required to have account credentials for the target system and log in using these credentials. As such, if …

attack attacks attack vector control default desktop edr environment feature malware analysis pcs protocol ransomware ransomware attacks rdp remote control remote desktop remote desktop protocol service system target windows