Entry and propagation
Phishing, public-facing application exploits, RDP, stolen accounts and brute force against VPN and RDP.
Targets
Organizations of every size across health, government, education, energy, manufacturing and transport.
Impact
As of May 2024: more than 2,500 victims in at least 120 countries and payments exceeding $120 million.
Defense
Use phishing-resistant MFA, close exposed RDP, patch VPN gateways and detect large data extraction.