The attackers use a multi-stage attack, starting with a malicious LNK file disguised as a healthcare-related document. This file, likely sent via phishing emails, triggers PowerShell commands to download and execute additional payloads from a remote server.  These payloads allow remote access to the system by modifying RDP settings and generating a new administrative account.  […]

The post Hackers Downgrading Remote Desktop Security Setting For Unauthorized Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

Source: gbHackers
Source Link: https://gbhackers.com/remote-desktop-security-breach/