Editing Remote Desktop Protocol (section)

== Use in cybercrime ==
Security researchers reported in 2016-17 that cybercriminals were selling compromised RDP servers on underground forums as well as specialized illicit RDP shops.<ref>{{Cite web|url=https://securelist.com/xdedic-the-shady-world-of-hacked-servers-for-sale/75027/|title=xDedic – the shady world of hacked servers for sale|last=GReAT|date=June 15, 2016|website=SecureList|access-date=2018-12-15|archive-date=December 15, 2018|archive-url=https://web.archive.org/web/20181215123112/https://securelist.com/xdedic-the-shady-world-of-hacked-servers-for-sale/75027/|url-status=live}}</ref><ref>{{Cite web|url=https://www.flashpoint-intel.com/blog/uas-shop-international-rdp-servers/|title="Ultimate Anonymity Services" Shop Offers Cybercriminals International RDP Servers|last1=Kremez|first1=Vitali|last2=Rowley|first2=Liv|date=2017-10-24|language=en-US|access-date=2018-12-15|archive-date=December 15, 2018|archive-url=https://web.archive.org/web/20181215171339/https://www.flashpoint-intel.com/blog/uas-shop-international-rdp-servers/|url-status=live}}</ref> These compromised RDPs may be used as a "staging ground" for conducting other types of fraud or to access sensitive personal or corporate data.<ref>{{Cite web|url=https://securityintelligence.com/news/dark-web-rdp-shops-offer-access-to-vulnerable-systems-for-as-little-as-3/|title=Dark Web 'RDP Shops' Offer Access to Vulnerable Systems for as Little as $3|last=Bisson|first=David|date=19 July 2018|website=Security Intelligence|language=en-US|access-date=2018-12-15|archive-date=December 15, 2018|archive-url=https://web.archive.org/web/20181215122030/https://securityintelligence.com/news/dark-web-rdp-shops-offer-access-to-vulnerable-systems-for-as-little-as-3/|url-status=live}}</ref> Researchers further report instances of cybercriminals using RDPs to directly drop malware on computers.<ref>{{Cite web|url=https://www.csoonline.com/article/3291617/security/samsam-infected-thousands-of-labcorp-systems-via-brute-force-rdp.html|title=Samsam infected thousands of LabCorp systems via brute force RDP|last=Ragan|first=Steve|date=2018-07-19|website=CSO Online|language=en|access-date=2018-12-15|archive-date=December 15, 2018|archive-url=https://web.archive.org/web/20181215122835/https://www.csoonline.com/article/3291617/security/samsam-infected-thousands-of-labcorp-systems-via-brute-force-rdp.html|url-status=live}}</ref>