Hacked Via RDP: Really Dumb Passwords
Summary: An underground service called Makost[dot]net sells access to more than 6,000 compromised RDP installations worldwide, priced from $3 to $10 based on CPU count, operating system version, and connection speed. KrebsOnSecurity examined one buyer who paid over $2,000 for 425 hacked RDPs in six months, and WHOIS lookups identified roughly 25 percent of the victim organizations, led by manufacturing (21) and retail services (20).
Why it matters: In the 430 systems sold to that one buyer, the username and password were identical in every case - accounts named 'intern,' 'techsupport,' 'payroll,' and even 'symantec' and 'sophos' - and Trustwave's 2013 report found IP remote access was again the most widely used method of infiltration.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026