The Remote Desktop Protocol (RDP) is being used by cyberattackers to penetrate and extract data from a network before introducing their malicious software to perform internal reconnaissance, according to a new Vectra 2019 Spotlight Report on RDP.
RDP is used by IT system administrators to centrally control their remote systems with the same functionality as if they were local, and RDP is used managed service providers in their management of hundreds of client networks and systems, notes the report. Three major attack scenarios in 2019 – an Iranian cyberespionage group; a Chinese state-sponsored actor; and a healthcare ransomware extortion scheme – leveraged RDP as part of the broader campaign, says the report.
In September 2018, the FBI warned that the malicious use of RDP “has been on the rise since mid-late 2016," says Vectra. The FBI also reported that several high-profile ransomware attacks, such as Samsam and CrySiS, utilised RDP to laterally move inside of networks. Data from the report shows that 90 percent of the organisations exhibited some form of malicious RDP behaviors between January-June 2019.
Additional findings from the report include:
Varonis Blog Highlights 110 Cybersecurity Statistics
Cybersecurity company Varonis has issued its predictions for the forthcoming year with a blog post entitled 110 Cybersecurity Statics For 2020. The blog states that cybersecurity issues are becoming a day-to-day struggle for businesses. Recent trends and cybersecurity statistics reveal a huge increase in hacked and breached data from sources that are increasingly common in the workplace, like mobile and IoT devices.read more
UK To Go On The Cyber Offensive
The UK Government is about to launch a new proactive and offensive cybersecurity team that will wage cyberwarfare against hostile nation-states and online crime organisations. It would be naive to believe that the UK has not launched cyberattacks against third parties, but the killing of Qassem Soleimani has brought this out into the open.read more
Are You Ready For Iranian Revenge Cyberattacks?
Following the killing of Qassem Suleimani no-one can be sure of what military action Iran will take, but experts agree that its cyberattacks will increase against countries and governments it sees as hostile.read more
Ringing The Changes For IOT Security
Buying and installing a cyber-doorbell through which you can monitor callers even if you are away from home makes sense, yes? Not unless you are a user from Alabama who has launched a $5million legal against action after it is alleged that a hacker cracked the Ring doorbell and started harassing the family.read more