Chrome Remote Desktop

Reported Context (2)

Chrome Remote Desktop Larva-26009 Uses Remote-Access Tools and SoftEther VPN in MS-SQL Server Attacks
connecting to the hostname remotedesktop-pa[.]googleapis[.]com, an API endpoint required for Chrome Remote Desktop, indicating that Chrome RDP was used by the threat actor in this stage of the attack. World Leaks Attack Exfiltrated Data and Encrypted a Healthcare Organization’s Files

Malware (4)

People (3)

Threat Actors (6)

MITRE ATT&CK (33)

Vendors (3)

Products (5)

Tools (14)

Industries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.