Analysis of 85K Remote Desktop Hacks Finds Education, Healthcare Top Targets

Flashpoint analyzed a dataset of 85,000 compromised RDP servers sold on the xDedic marketplace and found that education and healthcare networks were the most common targets; attackers primarily used large-scale scanning and brute-force password guessing to gain access and then pivoted within victim networks for data theft or further attacks.