Remote Desktop Protocol

FreeRDP 3.31.0 Fixes Pre-Auth RCE Chain in Server

• Vulnerability Report

FreeRDP 3.31.0 Fixes Pre-Auth RCE Chain in Server

Do Son September 2, 2026 0

FreeRDP 3.31.0 patches 5 server-role flaws, including a pre-auth remote code execution chain affecting GNOME Remote Desktop and KDE krdp.

The New Lockdown: How Microsoft’s April 2026 Update Silos Remote Desktop to Kill Phishing

• Windows

The New Lockdown: How Microsoft’s April 2026 Update Silos Remote Desktop to Kill Phishing

Do Son April 16, 2026 0

Microsoft hardens RDP in the April 2026 update. Discover how new default isolation policies and security warnings stop malicious servers from stealing your data.

Massive RDP Botnet Unleashed: 100,000+ IPs in Coordinated Global Scanning Campaign Targeting US

• Malware

Massive RDP Botnet Unleashed: 100,000+ IPs in Coordinated Global Scanning Campaign Targeting US

Do Son October 13, 2025 0

GreyNoise warns of a massive, synchronized RDP botnet using 100,000+ IPs from over 100 countries for RDP scanning and enumeration, with US infrastructure as the primary target.

A Storm Is Coming: A Massive Coordinated Attack Is Probing RDP Connections

• Cybercriminals

A Storm Is Coming: A Massive Coordinated Attack Is Probing RDP Connections

Do Son August 26, 2025 0

GreyNoise reports a massive, coordinated scanning campaign targeting Microsoft RDP services. Attackers are probing tens of thousands of IPs to prepare for future attacks.

RansomHub Breach: Six-Day Attack Leveraged RDP, RMM Tools & Mimikatz for Data Exfiltration & Ransomware

• Malware

RansomHub Breach: Six-Day Attack Leveraged RDP, RMM Tools & Mimikatz for Data Exfiltration & Ransomware

Do Son June 30, 2025 0

A six-day RansomHub attack exploited RDP, used Atera/Splashtop RMM, Mimikatz, and Rclone to breach an enterprise, exfiltrate data, and deploy ransomware.

Earth Koshchei’s Rogue RDP Campaign: A Sophisticated APT Attack Targets Governments and Enterprises

• Cyber Security

Earth Koshchei’s Rogue RDP Campaign: A Sophisticated APT Attack Targets Governments and Enterprises

Do Son December 19, 2024 0

Discover the espionage operations of Earth Koshchei, a threat group behind a large-scale remote desktop protocol (RDP) campaign.

Elpaco Ransomware: A New Threat Actor Leverages CVE-2020-1472 for Global Attacks

• Malware
• Vulnerability

Elpaco Ransomware: A New Threat Actor Leverages CVE-2020-1472 for Global Attacks

Do Son November 27, 2024 0

Learn about the new Elpaco ransomware variant and its sophisticated customization features. Discover how it exploits vulnerabilities and leverages legitimate software tools.

Bondnet Threat Actor Still Active, Using Bots as C2 Servers

• Cyber Security
• Malware

Bondnet Threat Actor Still Active, Using Bots as C2 Servers

Do Son June 12, 2024 0

ASEC has published a report detailing a significant shift in the tactics employed by the Bondnet threat actor