Cybercriminals most actively exploiting Remote Desktop Protocol in order to gain access to the targeted victims computer and steal login credentials and other sensitive information. Cyber criminals are selling stolen RDP access in various dark web underground marketplace. The FBI and Department of Homeland Security (DHS) warned to businesses to understand what remote accesses their networks allow and take steps to reduce the likelihood of compromise. Vulnerabilities of RDP Protocol include weak passwords using dictionary words or do not include a mixture of uppercase/lowercase letters, numbers, and special characters.”]
Source: https://gbhackers.com/exploitation-remote-desktop-protocol/