RDPWrap

Reported Context (1)

A large number of incidents across dozens of customers involved RDPWrap, a tool that enables concurrent RDP sessions on Windows editions that normally don't support them. Attackers install this to maintain RDP access A Playbook for Hardening Remote Access Tools in SMBs

CVE (3)

Malware (2)

Threat Actors (1)

MITRE ATT&CK (11)

Vendors (2)

Products (11)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.