Reverse RDP Attack: The Hyper-V Connection - Check Point Research
Tags
attack-pattern: Data Remote Desktop Protocol - T1021.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Vulnerabilities - T1588.006 Graphical User Interface - T1061 Remote Desktop Protocol - T1076 Graphical User Interface
Show in Graph
Common Information
Type Value
UUID 0d080566-d104-44ab-ba16-75e160143544
Fingerprint bc50a9dbca23c685
Analysis status DONE
Considered CTI value 0
Text language
Published Aug. 7, 2019, 11 p.m.
Added to db Feb. 17, 2023, 11:19 p.m.
Last updated Dec. 23, 2024, 2:07 p.m.
Headline Reverse RDP Attack: The Hyper-V Connection
Title Reverse RDP Attack: The Hyper-V Connection - Check Point Research
Detected Hints/Tags/Attributes 25/1/3
Source URLs
Redirection Url
Details Source https://research.checkpoint.com/2019/reverse-rdp-the-hyper-v-connection/
Details Source https://research.checkpoint.com/reverse-rdp-the-hyper-v-connection/
URL Provider
Details Provider Source level domain
Details checkpoint.com research.checkpoint.com
Attributes
Details Type #Events CTI Value
Details CVE 9 
cve-2019-0887
Details File 82 
mstsc.exe
Details File 7 
mstscax.dll