{"id":12468,"date":"2024-11-15T12:17:27","date_gmt":"2024-11-15T20:17:27","guid":{"rendered":"https:\/\/legacy.gosecure.ai\/?p=12468"},"modified":"2024-11-15T12:17:42","modified_gmt":"2024-11-15T20:17:42","slug":"large-scale-spear-phishing-campaign-with-malicious-rdp-attachments","status":"publish","type":"post","link":"https:\/\/legacy.gosecure.ai\/fr\/blog\/2024\/11\/15\/large-scale-spear-phishing-campaign-with-malicious-rdp-attachments\/","title":{"rendered":"Large-Scale Spear-Phishing Campaign with Malicious RDP Attachments"},"content":{"rendered":"

\"SecurityIn response to a recent report<\/a> from the Cybersecurity and Infrastructure Security Agency (CISA) on a large-scale spear-phishing campaign, GoSecure is alerting organizations to emerging threats involving malicious Remote Desktop Protocol (RDP) files. The campaign, reportedly orchestrated by a foreign threat actor targeting critical sectors like government and IT, seeks to exploit unsuspecting users through RDP attachments in emails that mimic trusted entities.<\/p>\n

The threat actor\u2019s objective is clear: establish initial access to networks through spear-phishing emails containing RDP files, thereby potentially compromising sensitive data. Once access is obtained, attackers may deploy additional malware to maintain a foothold within the network, presenting risks that require immediate action.<\/p>\n

Recommended Actions to Strengthen Defense:<\/strong><\/p>\n

Based on the recommendations from CISA, we strongly advise adopting the following mitigative strategies to protect against these advanced threats:<\/p>\n

    \n
  1. Restrict Outbound RDP Connections:<\/strong>
    \nTo prevent unauthorized access, organizations should restrict or block outbound RDP connections to external networks. This simple measure can significantly reduce risk exposure.<\/li>\n
  2. Block RDP Files in Communication Channels:<\/strong>
    \nEnsure RDP files are not transmitted through email or other messaging platforms. Blocking such files can prevent accidental execution and limit the reach of this spear-phishing attempt.<\/li>\n
  3. Implement Endpoint Detection and Response (EDR) Solutions:<\/strong>
    \nRobust EDR solutions provide continuous monitoring for potential malicious activity. GoSecure Titan\u00ae Managed Extended Detection & Response (MXDR) is engineered to detect anomalies and respond to evolving threats, fortifying defenses in a rapidly changing landscape.     Learn more about how GoSecure Titan\u00ae EDR works here<\/a>.<\/li>\n
  4. Incorporate Firewall Protections:<\/strong>
    \nA reliable firewall is essential in defending against unauthorized access attempts. GoSecure Titan\u00ae Managed Perimeter Defense (MPD) provides a secure, managed firewall solution that protects against a wide range of attack vectors. Our MPD service continuously monitors and fine-tunes firewall policies, ensuring optimal security and control at the network perimeter.     Learn more about how GoSecure Titan\u00ae MPD works here<\/a>.<\/li>\n
  5. Enable Multi-Factor Authentication (MFA):<\/strong>
    \nDeploy MFA across your network where feasible to add a critical layer of defense, with a preference for phishing-resistant methods, like FIDO tokens, over SMS-based MFA, which can be susceptible to SIM-jacking attacks.<\/li>\n
  6. Deploy Conditional Access Policies:<\/strong>
    \nImplement conditional access with phishing-resistant authentication methods to ensure only verified users access sensitive systems.<\/li>\n
  7. Conduct User Education:<\/strong>
    \nEmpower employees with the knowledge to recognize and report phishing attempts. User education is a frontline defense in combating social engineering threats, reducing the likelihood of successful intrusions.<\/li>\n
  8. Proactively Hunt for Malicious Indicators and TTPs:<\/strong>
    \nSearch for suspicious outbound RDP connections over the past year and any other indicators of compromise. GoSecure Titan\u00ae Threat Modeler provides enhanced visibility into emerging tactics, techniques, and procedures (TTPs) for proactive defense.     Learn more about how GoSecure Titan\u00ae Threat Modeler works here<\/a>.<\/li>\n<\/ol>\n

    Strengthening Cybersecurity with GoSecure<\/strong><\/p>\n

    As cyber threats like spear-phishing campaigns with malicious RDP attachments become increasingly sophisticated, a robust, layered approach to security is essential. GoSecure Titan\u00ae MXDR integrates Managed Perimeter Defense (MPD), Endpoint Detection and Response (EDR), and Threat Modeler, providing comprehensive coverage across network perimeters, endpoints, and threat analysis. This powerful combination enables rapid detection, response, and proactive risk management against unauthorized RDP access attempts and other advanced threats.<\/p>\n

    For a deeper look into RDP-specific risks and defense strategies, our RDP Use Case Brochure offers insights into securing remote desktop access and preventing threat actors from exploiting these pathways. Download the RDP Use Case Brochure here<\/a> to explore best practices and GoSecure\u2019s layered approach to RDP security.<\/p>\n

    Through our professional security services and threat hunting services, GoSecure equips organizations with actionable insights and tailored defenses, empowering clients to stay ahead of evolving threats while supporting compliance and resilience.<\/p>\n

    Ready to elevate your defenses? Learn more<\/a> about how GoSecure Titan\u00ae MXDR can strengthen your cybersecurity posture with comprehensive, adaptive solutions against today\u2019s most complex threats.<\/p>\n

    For customized strategies to enhance your cybersecurity, reach out to GoSecure today.<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

    \"SecurityIn response to a recent report<\/a> from the Cybersecurity and Infrastructure Security Agency (CISA) on a large-scale spear-phishing campaign, GoSecure is alerting organizations to emerging threats involving malicious Remote Desktop Protocol (RDP) files. The campaign, reportedly orchestrated by a foreign threat actor targeting critical sectors like government and IT, seeks to exploit unsuspecting users through RDP attachments in emails that mimic trusted entities.<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[437,459,632],"tags":[520,633,634,635,636,464,626,637,638],"class_list":["post-12468","post","type-post","status-publish","format-standard","hentry","category-avis-de-securite","category-rdp-fr","category-threat-intelligence-fr","tag-cybersecurity-fr","tag-endpoint-detection-fr","tag-gosecure-titan-fr","tag-managed-services-fr","tag-network-security-fr","tag-rdp-fr","tag-remote-desktop-protocol-fr","tag-spear-phishing-fr","tag-threat-intelligence-fr"],"yoast_head":"\nLarge-Scale Spear-Phishing Campaign with Malicious RDP Attachments - GoSecure<\/title>\n<meta name=\"description\" content=\"GoSecure issues a critical alert about a recent spear-phishing campaign targeting organizations through malicious Remote Desktop Protocol (RDP) files. Learn about the risks and how to implement effective defenses with GoSecure Titan\u00ae MXDR, Managed Perimeter Defense (MPD), and Endpoint Detection and Response (EDR) solutions.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/legacy.gosecure.ai\/fr\/blog\/2024\/11\/15\/large-scale-spear-phishing-campaign-with-malicious-rdp-attachments\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Large-Scale Spear-Phishing Campaign with Malicious RDP Attachments\" \/>\n<meta property=\"og:description\" content=\"GoSecure issues a critical alert about a recent spear-phishing campaign targeting organizations through malicious Remote Desktop Protocol (RDP) files. Learn about the risks and how to implement effective defenses with GoSecure Titan\u00ae MXDR, Managed Perimeter Defense (MPD), and Endpoint Detection and Response (EDR) solutions.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/legacy.gosecure.ai\/fr\/blog\/2024\/11\/15\/large-scale-spear-phishing-campaign-with-malicious-rdp-attachments\/\" \/>\n<meta property=\"og:site_name\" content=\"GoSecure\" \/>\n<meta property=\"article:published_time\" content=\"2024-11-15T20:17:27+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-11-15T20:17:42+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/legacy.gosecure.ai\/wp-content\/uploads\/Security-Advisory-Large-Scale-Spear-Phishing-Campaign-with-Malicious-RDP-Attachments--300x157.jpg\" \/>\n<meta name=\"author\" content=\"GoSecure\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@GoSecure_Inc\" \/>\n<meta name=\"twitter:site\" content=\"@GoSecure_Inc\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"GoSecure\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/legacy.gosecure.ai\/fr\/blog\/2024\/11\/15\/large-scale-spear-phishing-campaign-with-malicious-rdp-attachments\/\",\"url\":\"https:\/\/legacy.gosecure.ai\/fr\/blog\/2024\/11\/15\/large-scale-spear-phishing-campaign-with-malicious-rdp-attachments\/\",\"name\":\"Large-Scale Spear-Phishing Campaign with Malicious RDP Attachments - GoSecure\",\"isPartOf\":{\"@id\":\"https:\/\/legacy.gosecure.ai\/fr\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/legacy.gosecure.ai\/fr\/blog\/2024\/11\/15\/large-scale-spear-phishing-campaign-with-malicious-rdp-attachments\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/legacy.gosecure.ai\/fr\/blog\/2024\/11\/15\/large-scale-spear-phishing-campaign-with-malicious-rdp-attachments\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/legacy.gosecure.ai\/wp-content\/uploads\/\/Security-Advisory-Large-Scale-Spear-Phishing-Campaign-with-Malicious-RDP-Attachments--300x157.jpg\",\"datePublished\":\"2024-11-15T20:17:27+00:00\",\"dateModified\":\"2024-11-15T20:17:42+00:00\",\"author\":{\"@id\":\"https:\/\/legacy.gosecure.ai\/fr\/#\/schema\/person\/11f4bfed2ab7b748dfc255aa91baedca\"},\"description\":\"GoSecure issues a critical alert about a recent spear-phishing campaign targeting organizations through malicious Remote Desktop Protocol (RDP) files. Learn about the risks and how to implement effective defenses with GoSecure Titan\u00ae MXDR, Managed Perimeter Defense (MPD), and Endpoint Detection and Response (EDR) solutions.\",\"breadcrumb\":{\"@id\":\"https:\/\/legacy.gosecure.ai\/fr\/blog\/2024\/11\/15\/large-scale-spear-phishing-campaign-with-malicious-rdp-attachments\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/legacy.gosecure.ai\/fr\/blog\/2024\/11\/15\/large-scale-spear-phishing-campaign-with-malicious-rdp-attachments\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\/\/legacy.gosecure.ai\/fr\/blog\/2024\/11\/15\/large-scale-spear-phishing-campaign-with-malicious-rdp-attachments\/#primaryimage\",\"url\":\"https:\/\/legacy.gosecure.ai\/wp-content\/uploads\/\/Security-Advisory-Large-Scale-Spear-Phishing-Campaign-with-Malicious-RDP-Attachments--300x157.jpg\",\"contentUrl\":\"https:\/\/legacy.gosecure.ai\/wp-content\/uploads\/\/Security-Advisory-Large-Scale-Spear-Phishing-Campaign-with-Malicious-RDP-Attachments--300x157.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/legacy.gosecure.ai\/fr\/blog\/2024\/11\/15\/large-scale-spear-phishing-campaign-with-malicious-rdp-attachments\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/legacy.gosecure.ai\/fr\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Large-Scale Spear-Phishing Campaign with Malicious RDP Attachments\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/legacy.gosecure.ai\/fr\/#website\",\"url\":\"https:\/\/legacy.gosecure.ai\/fr\/\",\"name\":\"GoSecure\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/legacy.gosecure.ai\/fr\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/legacy.gosecure.ai\/fr\/#\/schema\/person\/11f4bfed2ab7b748dfc255aa91baedca\",\"name\":\"GoSecure\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Large-Scale Spear-Phishing Campaign with Malicious RDP Attachments - GoSecure","description":"GoSecure issues a critical alert about a recent spear-phishing campaign targeting organizations through malicious Remote Desktop Protocol (RDP) files. Learn about the risks and how to implement effective defenses with GoSecure Titan\u00ae MXDR, Managed Perimeter Defense (MPD), and Endpoint Detection and Response (EDR) solutions.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/legacy.gosecure.ai\/fr\/blog\/2024\/11\/15\/large-scale-spear-phishing-campaign-with-malicious-rdp-attachments\/","og_locale":"fr_FR","og_type":"article","og_title":"Large-Scale Spear-Phishing Campaign with Malicious RDP Attachments","og_description":"GoSecure issues a critical alert about a recent spear-phishing campaign targeting organizations through malicious Remote Desktop Protocol (RDP) files. Learn about the risks and how to implement effective defenses with GoSecure Titan\u00ae MXDR, Managed Perimeter Defense (MPD), and Endpoint Detection and Response (EDR) solutions.","og_url":"https:\/\/legacy.gosecure.ai\/fr\/blog\/2024\/11\/15\/large-scale-spear-phishing-campaign-with-malicious-rdp-attachments\/","og_site_name":"GoSecure","article_published_time":"2024-11-15T20:17:27+00:00","article_modified_time":"2024-11-15T20:17:42+00:00","og_image":[{"url":"https:\/\/legacy.gosecure.ai\/wp-content\/uploads\/Security-Advisory-Large-Scale-Spear-Phishing-Campaign-with-Malicious-RDP-Attachments--300x157.jpg"}],"author":"GoSecure","twitter_card":"summary_large_image","twitter_creator":"@GoSecure_Inc","twitter_site":"@GoSecure_Inc","twitter_misc":{"\u00c9crit par":"GoSecure","Dur\u00e9e de lecture estim\u00e9e":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/legacy.gosecure.ai\/fr\/blog\/2024\/11\/15\/large-scale-spear-phishing-campaign-with-malicious-rdp-attachments\/","url":"https:\/\/legacy.gosecure.ai\/fr\/blog\/2024\/11\/15\/large-scale-spear-phishing-campaign-with-malicious-rdp-attachments\/","name":"Large-Scale Spear-Phishing Campaign with Malicious RDP Attachments - GoSecure","isPartOf":{"@id":"https:\/\/legacy.gosecure.ai\/fr\/#website"},"primaryImageOfPage":{"@id":"https:\/\/legacy.gosecure.ai\/fr\/blog\/2024\/11\/15\/large-scale-spear-phishing-campaign-with-malicious-rdp-attachments\/#primaryimage"},"image":{"@id":"https:\/\/legacy.gosecure.ai\/fr\/blog\/2024\/11\/15\/large-scale-spear-phishing-campaign-with-malicious-rdp-attachments\/#primaryimage"},"thumbnailUrl":"https:\/\/legacy.gosecure.ai\/wp-content\/uploads\/\/Security-Advisory-Large-Scale-Spear-Phishing-Campaign-with-Malicious-RDP-Attachments--300x157.jpg","datePublished":"2024-11-15T20:17:27+00:00","dateModified":"2024-11-15T20:17:42+00:00","author":{"@id":"https:\/\/legacy.gosecure.ai\/fr\/#\/schema\/person\/11f4bfed2ab7b748dfc255aa91baedca"},"description":"GoSecure issues a critical alert about a recent spear-phishing campaign targeting organizations through malicious Remote Desktop Protocol (RDP) files. Learn about the risks and how to implement effective defenses with GoSecure Titan\u00ae MXDR, Managed Perimeter Defense (MPD), and Endpoint Detection and Response (EDR) solutions.","breadcrumb":{"@id":"https:\/\/legacy.gosecure.ai\/fr\/blog\/2024\/11\/15\/large-scale-spear-phishing-campaign-with-malicious-rdp-attachments\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/legacy.gosecure.ai\/fr\/blog\/2024\/11\/15\/large-scale-spear-phishing-campaign-with-malicious-rdp-attachments\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/legacy.gosecure.ai\/fr\/blog\/2024\/11\/15\/large-scale-spear-phishing-campaign-with-malicious-rdp-attachments\/#primaryimage","url":"https:\/\/legacy.gosecure.ai\/wp-content\/uploads\/\/Security-Advisory-Large-Scale-Spear-Phishing-Campaign-with-Malicious-RDP-Attachments--300x157.jpg","contentUrl":"https:\/\/legacy.gosecure.ai\/wp-content\/uploads\/\/Security-Advisory-Large-Scale-Spear-Phishing-Campaign-with-Malicious-RDP-Attachments--300x157.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/legacy.gosecure.ai\/fr\/blog\/2024\/11\/15\/large-scale-spear-phishing-campaign-with-malicious-rdp-attachments\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/legacy.gosecure.ai\/fr\/"},{"@type":"ListItem","position":2,"name":"Large-Scale Spear-Phishing Campaign with Malicious RDP Attachments"}]},{"@type":"WebSite","@id":"https:\/\/legacy.gosecure.ai\/fr\/#website","url":"https:\/\/legacy.gosecure.ai\/fr\/","name":"GoSecure","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/legacy.gosecure.ai\/fr\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"fr-FR"},{"@type":"Person","@id":"https:\/\/legacy.gosecure.ai\/fr\/#\/schema\/person\/11f4bfed2ab7b748dfc255aa91baedca","name":"GoSecure"}]}},"_links":{"self":[{"href":"https:\/\/legacy.gosecure.ai\/fr\/wp-json\/wp\/v2\/posts\/12468","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/legacy.gosecure.ai\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/legacy.gosecure.ai\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/legacy.gosecure.ai\/fr\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/legacy.gosecure.ai\/fr\/wp-json\/wp\/v2\/comments?post=12468"}],"version-history":[{"count":0,"href":"https:\/\/legacy.gosecure.ai\/fr\/wp-json\/wp\/v2\/posts\/12468\/revisions"}],"wp:attachment":[{"href":"https:\/\/legacy.gosecure.ai\/fr\/wp-json\/wp\/v2\/media?parent=12468"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/legacy.gosecure.ai\/fr\/wp-json\/wp\/v2\/categories?post=12468"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/legacy.gosecure.ai\/fr\/wp-json\/wp\/v2\/tags?post=12468"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}