Tool
RDP Patcher
- First Reported
- Jul 16, 2026
- Latest Reported
- Jul 16, 2026
Reported Context (1)
- The threat actor also used an RDP Patcher, which reads the existing legitimate “termsrv.Dll,” saves the patched version to the “C:\temp.Dll” Path, and then replaces the “termsrv.Dll” file in the System32 directory with Kimsuky Uses Diplomat Impersonation to Deploy PebbleDash and PrxClient
Malware (2)
Threat Actors (1)
MITRE ATT&CK (13)
Products (2)
Tools (3)
Industries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.