Friday 5:14 PM, a vendor asks for RDP on port 3389. Monday morning the domain controller is encrypted. Exposed RDP is an invitation. Here's how attackers get https://www.valtersit.com/guides/security/port-3389-to-the-world-how-to-lose-your-company-data-over-the-weekend/
#rdp #ransomware #netsec
