Remote Desktop Protocol (RDP)

Remote Desktop Protocol is a Microsoft technology that lets a person connect to and control a Windows computer or server over a network as if sitting in front of it.

RDP is widely used by IT staff to manage servers and by employees to reach office computers from home. It is built into Windows and is convenient, which is why it is so common in small business environments.

When RDP is exposed directly to the internet, criminals constantly scan for it and try stolen or guessed passwords against it. Exposed RDP has long been one of the most common ways ransomware groups gain their first foothold. Once in, they have full control of the machine and can move across the network.

Practical tip: never leave RDP open directly to the internet. Place it behind a VPN or a secure remote access gateway that requires multi-factor authentication, limit which accounts are allowed to connect and lock accounts after repeated failed attempts. Ask your IT provider to confirm that no RDP ports are open on your firewall.