Report: <a href="https://thedfirreport.com/2025/03/31/fake-zoom-ends-in-blacksuit-ransomware/" rel="ugc noopener noreferrer" target="_blank">⁠⁠⁠</a><a href="https://thedfirreport.com/2025/05/19/another-confluence-bites-the-dust-falling-to-elpaco-team-ransomware/" rel="ugc noopener noreferrer" target="_blank">⁠</a><a href="https://thedfirreport.com/2025/06/30/hide-your-rdp-password-spray-leads-to-ransomhub-deployment" target="_blank" rel="ugc noopener noreferrer">https://thedfirreport.com/2025/06/30/hide-your-rdp-password-spray-leads-to-ransomhub-deployment</a>Contact Us: ⁠⁠⁠⁠<a href="https://thedfirreport.com/contact/" rel="ugc noopener noreferrer" target="_blank">⁠⁠⁠⁠⁠⁠⁠⁠⁠https://thedfirreport.com/contact/⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠</a>Services: <a href="https://thedfirreport.com/services/" rel="ugc noopener noreferrer" target="_blank">⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://thedfirreport.com/services/⁠⁠⁠⁠⁠⁠⁠</a>

Report: ⁠⁠⁠⁠https://thedfirreport.com/2025/06/30/hide-your-rdp-password-spray-leads-to-ransomhub-deployment Contact Us: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://thedfirreport.com/contact/⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Services: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://thedfirreport.com/services/⁠⁠⁠⁠⁠⁠⁠

Report: <a href="https://thedfirreport.com/2025/03/31/fake-zoom-ends-in-blacksuit-ransomware/" rel="noopener noreferrer">⁠⁠⁠</a><a href="https://thedfirreport.com/2025/05/19/another-confluence-bites-the-dust-falling-to-elpaco-team-ransomware/" rel="noopener noreferrer">⁠</a><a href="https://thedfirreport.com/2025/06/30/hide-your-rdp-password-spray-leads-to-ransomhub-deployment" rel="noopener noreferrer">https://thedfirreport.com/2025/06/30/hide-your-rdp-password-spray-leads-to-ransomhub-deployment</a>Contact Us: ⁠⁠⁠⁠<a href="https://thedfirreport.com/contact/" rel="noopener noreferrer">⁠⁠⁠⁠⁠⁠⁠⁠⁠https://thedfirreport.com/contact/⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠</a>Services: <a href="https://thedfirreport.com/services/" rel="noopener noreferrer">⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://thedfirreport.com/services/⁠⁠⁠⁠⁠⁠⁠</a>

Hide Your RDP: Password Spray Leads to RansomHub Deployment

The Digital Forensics and Incident Response (DFIR) Report. Real Intrusions by Real Attackers, The Truth Behind the Intrusion. 

A new report comes out every month! Read the rest of the reports at https://thedfirreport.com/.

In addition to our publicly available reports, we provide a range of specialized services to meet your needs, such as private reports, Command and Control tracking, personalized mentoring, and access to an exclusive detection ruleset. Explore our comprehensive offerings on our Services page at https://thedfirreport.com/services/.

Technology

The Digital Forensics and Incident Response (DFIR) Report. Real Intrusions by Real Attackers, The Truth Behind the Intrusion. A new report comes out every month! Read the rest of the reports at https://thedfirreport.com/. In addition to our publicly available reports, we provide a range of specialized services to meet your needs, such as private reports, Command and Control tracking, personalized mentoring, and access to an exclusive detection ruleset. Explore our comprehensive offerings on our Services page at https://thedfirreport.com/services/.

Share Hide Your RDP: Password Spray Leads to RansomHub Deployment

Sign up to save your podcasts

Hide Your RDP: Password Spray Leads to RansomHub Deployment

Hide Your RDP: Password Spray Leads to RansomHub Deployment