On August 21, GreyNoise observed a sharp surge in scanning against Microsoft Remote Desktop (RDP) services. The wave’s aim was clear: test for timing flaws that reveal valid usernames, laying the groundwork for credential-based intrusions.
Nearly 2,000 Malicious IPs Probe Microsoft Remote Desktop After Single-Day Surge
calendar_today
August 25, 2025
domain
greynoise