Windows malware opens RDP ports on PCs for future remote access

[CyberTech]

Content source

https://www.zdnet.com/article/windows-malware-opens-rdp-ports-on-pcs-for-future-remote-access/#ftag=RSSbaffb68

Security experts believe the malware's operators are very likely to sell access to infected hosts to other hacker groups.

Security researchers say they've spotted a new version of the Sarwent malware that opens RDP (Remote Desktop Protocol) ports on infected computers so hackers could gain hands-on access to infected hosts.

Researchers from SentinelOne, who spotted this new version, believe the Sarwent operators are most likely preparing to sell access to these systems on the cybercrime underworld, a common method of monetizing RDP-capable hosts.

 

[bayasdev]

AV companies: start flagging files that open RDP ports
Sarwent authors: