An underground service rents access to hacked PCs at organizations that make this all-too-common mistake. The largest group of organizations on this list were in the manufacturing (21 victims) and retail services (20) industries. The number 2 most-exploited weakness: Deafult/weak credentials, a security expert says. In 2012, IP remote access remained the most widely used method of infiltration in 2012, according to a report by Trustwave, a company which frequently gets called in when companies experience a data breach.”]
Source: https://krebsonsecurity.com/2013/12/hacked-via-rdp-really-dumb-passwords/