Login
From:
The DFIR Report
(Uncensored)
subscribe
Hide Your RDP: Password Spray Leads to RansomHub Deployment – The DFIR Report
https://thedfirreport.com/2025/06/30/hide-your-rdp-password-spray-leads-to-ransomhub-deployment/
links
backlinks
Tagged with:
ransomware
rdp
ransomhub
Key Takeaways Initial access was via a password spray attack against an exposed RDP server, targeting numerous accounts over a four-hour period. Mimikatz and Nirsoft were used to harvest credential…
Roast topics
Find topics
Find it!
