Remote Desktop Protocol (RDP) Attack Analysis | Darktrace Blog
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Direct Model Models Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Non-Standard Port - T1509 Non-Standard Port - T1571 Phishing - T1660 Phishing - T1566 Remote Desktop Protocol - T1021.001 Server - T1583.004 Server - T1584.004 Tool - T1588.002 Vulnerabilities - T1588.006 Vulnerability Scanning - T1595.002 Remote Access Tools - T1219 Remote Desktop Protocol - T1076 Windows Management Instrumentation - T1047
Show in Graph
Common Information
Type Value
UUID 63f2ed34-2928-40b2-a1c6-f7c06ab7ee3f
Fingerprint a79129138923d6cb
Analysis status DONE
Considered CTI value 0
Text language
Published Aug. 16, 2021, midnight
Added to db Aug. 13, 2023, 4:52 p.m.
Last updated Oct. 16, 2024, 2:03 a.m.
Headline Remote Desktop Protocol (RDP) Attack Analysis
Title Remote Desktop Protocol (RDP) Attack Analysis | Darktrace Blog
Detected Hints/Tags/Attributes 103/2/12
Source URLs
Redirection Url
Details Source https://darktrace.com/blog/remote-desktop-protocol-rdp-attack-analysis
URL Provider
Details Provider Source level domain
Details darktrace.com darktrace.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 101 ✔ — https://de.darktrace.com/blog/rss.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 76 
ipfs.io
Details Domain 58 
image.thum.io
Details Domain 58 
logo.clearbit.com
Details Domain 58 
mku.ipfs.dweb.link
Details Domain 58 
filebase.com
Details File 58 
ob.html
Details File 58 
atob.html
Details File 58 
cpmk.htm
Details Url 58 
https://ipfs.io/ipfs/qmfddxlwoliqfurx6duzcshxvbp1znm21h5jxgs1ffnxtp?filename=at
Details Url 58 
https://ipfs.io/ipfs/qmfddxlwoli
Details Url 58 
https://filebase.com/blog/ipfs-content-addressing-explained
Details Url 58 
https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/the-attack-of-the-chameleon-phishing-page