Hackers target Remote Desktop Protocol (RDP) via malware because it provides them with remote access to a victim’s computer or network, allowing them to:- Steal data Deploy ransomware Conduct other malicious activities Cybersecurity researchers at IBM X-Force affirmed recently that in place of conventional frameworks like CobaltStrike, the Gootloader group unveiled GootBot, a new tool for C2 and lateral movement. Gootloader Malware Abuses RDP GootBot, a stealthy Gootloader variant for lateral movement, complicates detection.

Source: GBHackers