VERY IMPORTANT

Researchers at CRIL have spotted a malware named ‘Vector Stealer’. This malware appeared in cybercrime forums in the second half of 2022 and it specifically targets .rdp files and steals them, suggesting a potential interest in RDP hijacking to gain access to victims’ networks. TAs can leverage RDP files to carry out numerous attacks, including ransomware attacks.