A Look at NLBrute, the RDP Attack Tool
Tags
country: Georgia Russia
attack-pattern: Botnet - T1583.005 Botnet - T1584.005 Credentials - T1589.001 Ip Addresses - T1590.005 Password Spraying - T1110.003 Remote Desktop Protocol - T1021.001 Search Engines - T1593.002 Software - T1592.002 Tool - T1588.002 Vulnerabilities - T1588.006 Brute Force - T1110 Remote Desktop Protocol - T1076
Show in Graph
Common Information
Type Value
UUID 0ea0fb56-6f1d-448e-b58d-9f401be4aac0
Fingerprint 2fb0780b3b153d2e
Analysis status DONE
Considered CTI value 2
Text language
Published March 15, 2023, midnight
Added to db Aug. 31, 2024, 3:45 a.m.
Last updated Nov. 17, 2024, 6:53 p.m.
Headline A Look at NLBrute, the RDP Attack Tool
Title A Look at NLBrute, the RDP Attack Tool
Detected Hints/Tags/Attributes 45/2/3
Source URLs
Redirection Url
Details Source https://intel471.com/blog/a-look-at-nlbrute-the-rdp-attack-tool
URL Provider
Details Provider Source level domain
Details intel471.com intel471.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 138 ✔ Intel471 https://intel471.com/blog/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 197 
cve-2019-0708
Details CVE 15 
cve-2019-1181
Details CVE 11 
cve-2019-1182