Tag: RDP exploitation

Qilin Ransomware Uses RDP History to Accelerate Lateral Movement

Qilin ransomware now harvests cached RDP connection logs from Windows servers to map internal networks and prioritize targets for encryption.