Ransomware enters companies through RDP servers

Attackers wielding ransomware are targeting enterprises through an often-found hole in the corporate network: Internet facing, poorly secured remote desktop servers. According to Wouter Jansen, Senior Forensic IT Expert at Fox-IT, the company has lately been called in by a number of firms that have been hit with ransomware, and a subset of those has let attackers and the ransomware in through that channel (click on the screenshot to enlarge it): “Entries in the log … More →
from Help Net Security http://ift.tt/21vwPmV