value:  CIS based ransomware, such as Fonix will often try to infect as many machines that are accessed via lateral movement instagated from the hijacking of a Remote Desktop Protocol (RDP). 
name: Remote Service Session Hijacking: Rdp Hijacking