Scans for RDP Gateways, (Wed, Oct 30th)
SANS Internet Storm Center, InfoCON: green 2024-10-31
Summary:
RDP is one of the most prominent entry points into networks. Ransomware actors have taken down many large networks after initially entering via RDP. Credentials for RDP access are often traded by “initial access brokers".