There have been several public reports of active exploitation of CVE-2019-0708, commonly referred to as BlueKeep Preliminary reports indicate that the vulnerability is being exploited by adversaries who are leveraging access to compromised systems to install cryptocurrency mining malware. Microsoft has released several security updates for critical Remote Desktop Protocol (RDP)-related security bugs. These bugs are classified as “wormable,” meaning future malware that exploits them could spread from system to system without requiring explicit user interaction.”]
Source: https://blog.talosintelligence.com/2019/09/the-latest-on-bluekeep-and-dejablue.html