Cybercrime-as-a-service economy offers even unskilled attackers the chance to become a profit-generating cybercriminal. Two of the leading marketplaces for stolen remote desktop protocol credentials are UAS – for “Ultimate Anonymity Services” – and xDedic, a Russian language forum started in 2014. Darknet marketplaces are providing criminals with “access to, amongst other things, payment fraud, firearms, counterfeit documents to facilitate fraud, trafficking in human beings and illegal immigration””]
Source: https://www.govinfosecurity.com/how-much-that-rdp-credential-in-window-a-10590