THREAT OPS › Threat News › Nearly 2,000 Malicious IPs Probe Microsoft Remote Desktop After Single-Day Surge
Nearly 2,000 Malicious IPs Probe Microsoft Remote Desktop After Single-Day Surge
On August 21, GreyNoise observed a sharp surge in scanning against Microsoft Remote Desktop (RDP) services. The wave’s aim was clear: test for timing flaws that reveal valid usernames, laying the groundwork for credential-based intrusions.