Cracking 2.3M Attackers-Supplied Credentials: What Can We Learn from RDP Attacks

Abstract: 

The article discusses the dangers of Remote Desktop Protocol (RDP) credential attacks, which have increased during the pandemic due to more people working from home. The authors set up high-interaction honeypots to analyze over 2.3 million connections that supplied hashed credentials and attempted to crack them. They found that RDP is a favorite point of entry for criminal hackers and any computer exposing RDP to the internet is likely to be subject to frequent attacks. The article provides mitigation advice and describes some of the different strategies employed in attempting to guess usernames and passwords on RDP-exposed systems.

Author: 

Dr. Andréanne Bergeron

Year: 

2022

Domain: 

Dimension: 

Region: 

Data Type: 

Keywords: