Why RDPs Are an Easy Mark for Threat Actors

This report analyzes the widespread risk of RDP brute-force attacks—identified as the third most common initial access technique in observed incidents—detailing reconnaissance, enumeration, brute-forcing, post-exploitation and monetization steps, providing a Russia-linked case study, and offering concrete mitigation guidance (limit exposure, enforce strong credentials and NLA, rate limiting, monitoring and account lockout).