Cybercriminals Actively Exploiting RDP to Target Remote Organizations

This McAfee ATR blog summarizes a sharp increase in Internet-exposed RDP services and the associated risks: attackers are exploiting weak passwords, protocol vulnerabilities (e.g., BlueKeep and Remote Desktop Gateway issues), and underground markets selling RDP access to perform spam, malware distribution, and network compromise; the post provides defensive guidance such as avoiding direct Internet-facing RDP, using MFA, patching, and restricting administrative access.