ESET researchers said in a new report that Remote Desktop Protocol attacks rose by 768% through 2020, with 29 billion RDP attacks attempted throughout the year, according to ZDNet.
Researchers attributed the increase to the greater number of employees having to work from home last year, giving cybercriminals more openings to gain access through stolen, guessed or phished login credentials while evading detection. The ESET report noted several cases of misconfigured RDP ports, which pose a greater risk for cybercriminal infiltration.
“Misconfigured RDP in many cases leads to valuable resources, such as company servers or devices with admin rights, that represent a springboard for further, often network-wide, compromises,” said ESET specialist Ondrej Kubovič.
Cybercriminals use RDP attacks to steal information or as a starting point for a ransomware campaign. The researchers said RDP attacks declined in December, likely due to attackers taking a Christmas break, but said they expect the number of RDP attacks to increase throughout the year as cybercriminals take advantage of the remote working boom among corporations.
Jill Aitoro leads editorial for SC Media, and content strategy for parent company CyberRisk Alliance. She 20 years of experience editing and reporting on technology, business and policy.
SecurityWeek reports that SAP systems have been subjected to a 400% increase in ransomware attacks during the last three years, while hacker forum conversations regarding SAP vulnerabilities and SAP-specific cloud and web services rose by 490% and 220%, respectively, over the same period.