value:  Chimera has used RDP to access targeted systems. ;; Cobalt Group has used Remote Desktop Protocol to conduct lateral movement. ;; Cobalt Strike can start a VNC-based remote desktop server and tunnel the connection through the already established C2 channel. ;; DarkComet can open an active screen of the victim’s machine and take control of the mouse and keyboard. ;; Dragonfly 2.0 moved laterally via RDP. ;; FIN10 has used RDP to move laterally to systems in the victim environment. ;; FIN6 used RDP to move laterally in victim networks. ;; FIN8 has used RDP for Lateral Movement. ;; Fox Kitten has used RDP to log in and move laterally in the target environment. ;; Imminent Monitor has a module for performing remote desktop access. ;; jRAT can support RDP control. ;; Koadic can enable remote desktop on the victim's machine. ;; Lazarus Group malware SierraCharlie uses RDP for propagation. ;; Leviathan has targeted RDP credentials and used it to move through the victim environment. ;; menuPass has used RDP connections to move across the victim network. ;; njRAT has a module for performing remote desktop access. ;; OilRig has used Remote Desktop Protocol for lateral movement. The group has also used tunneling tools to tunnel RDP into the environment. ;; Patchwork attempted to use RDP to move laterally. ;; Pupy can enable/disable RDP connection and can start a remote desktop session using a browser web socket client. ;; Pysa has laterally moved using RDP connections. ;; QuasarRAT has a module for performing remote desktop access. ;; Revenge RAT has a plugin to perform RDP access. ;; SDBbot has the ability to use RDP to connect to victim's machines. ;; ServHelper has commands for adding a remote desktop user and sending RDP traffic to the attacker through a reverse SSH tunnel. ;; Silence has used RDP for lateral movement. ;; Stolen Pencil utilized RDP for direct remote point-and-click access. ;; TEMP.Veles utilized RDP throughout an operation. ;; Wizard Spider has used RDP for lateral movement. ;; zwShell has used RDP for lateral movement. ;; ZxShell has remote desktop functionality.
name: Remote Services: Remote Desktop Protocol