Microsoft Windows component, RDP, was designed to provide administrators, engineers, and users with remote access to systems. Threat actors have been using the technology for nefarious purposes, and the trend continues. An RDP attack is usually more difficult to detect than a backdoor. Organizations should focus on both host-based and network-based prevention and detection mechanisms, says FireEye. RDP sessions can also be daisy chained across multiple systems as a way to move laterally through an environment, the report says.”]
Source: https://gbhackers.com/threat-actors-conducting-rdp-attacks/