The Remote Desktop Protocol (RDP) is being used by cyberattackers to penetrate and extract data from a network before introducing their malicious software to perform internal reconnaissance, according to a new Vectra 2019 Spotlight Report on RDP.
RDP is used by IT system administrators to centrally control their remote systems with the same functionality as if they were local, and RDP is used managed service providers in their management of hundreds of client networks and systems, notes the report. Three major attack scenarios in 2019 – an Iranian cyberespionage group; a Chinese state-sponsored actor; and a healthcare ransomware extortion scheme – leveraged RDP as part of the broader campaign, says the report.
In September 2018, the FBI warned that the malicious use of RDP “has been on the rise since mid-late 2016," says Vectra. The FBI also reported that several high-profile ransomware attacks, such as Samsam and CrySiS, utilised RDP to laterally move inside of networks. Data from the report shows that 90 percent of the organisations exhibited some form of malicious RDP behaviors between January-June 2019.
Additional findings from the report include:
SEC Releases Guide To Combat Cybersecurity Threats
The Securities and Exchange Commission has released a guide to best practices to combat cybersecurity infractions, data loss and privacy breaches.read more
FBI Fires Off A $3.5 Billion Cybercrime Warning
America's FBI has released the Internet Crime Complaint Center (IC3) "2019 Internet Crime Report." which shows that in on year the number of cybercrime complaints from individuals and business organizations reached a staggering 467,361. The total cost £2.7 billion.read more
Fake Coronavirus Emails Contains Malware
Fear of the coronavirus infection is being leveraged by cybercriminals for their malicious activities, new research shows. Criminals disguised malware as documents proporting to be for educational purposes.read more
Phishing Lures Still Affecting Organisations
A cybersecurity survey carried out by Proofpoint discovered that 90 percent of global organisations were targeted with BEC and spear phishing attacks in 2019, reflecting cybercriminals’ continued focus on compromising individual end users. Seventy-eight percent also reported that security awareness training activities resulted in measurable reductions in phishing susceptibility.read more