Remote desktop connections are so powerful a magnet for hackers that an exposed connection can average more than 37,000 times every day from various IP addresses.
During this phase, the attacks are automated. But once they get the right access credentials, the hackers start searching for important or sensitive files manually
An experiment using high-interaction honeypots with an RDP connection accessible from the public web shows how relentless attackers are
@ecksmc it blows my mind every time I hear of someone just, like, directly exposing port 3389 to the internet..
..just wild
