Top 10 Most-Used RDP Passwords Are Not Complex Enough

### Executive Summary: The Specops analysis of passwords observed in RDP honeypot attacks shows pervasive weak password hygiene—common values like "1234", "Password1", and short passwords dominate—making internet-exposed RDP a frequent entry vector for brute-force attacks that have been abused in ransomware and DDoS campaigns; organizations are advised to enforce stronger passwords, implement MFA, and consider isolating or replacing RDP with zero‑trust access.