
Global cybersecurity company Kaspersky, issuing a press release on Monday, reported that they blocked more than four million cyber-attacks targeting businesses in Bangladesh in the last year.
From January to December in 2023, a total of 4,012,024 Bruteforce.Generic.RDP.* were detected and foiled by Kaspersky B2B products installed in different companies in the country, the release said.
A Bruteforce attack is a method for guessing a password or an encryption key that involves systematically trying all possible combinations of characters until a correct one is found. A successful Bruteforce attack allows an attacker to obtain valid user credentials.
Remote Desktop Protocol is Microsoft’s proprietary protocol, providing a user with a graphical interface to connect to another computer through a network. RDP is widely used by both system administrators and less-technical users to control servers and other PCs remotely.
A Bruteforce.Generic.RDP.* attack attempts to find a valid RDP login or password pair by systematically checking all possible passwords until the correct one is found.
A successful Bruteforce.Generic.RDP.* attack allows an attacker to gain remote access to the targeted host computer.
‘Bruteforce attack is not a threat companies should ignore. The use of third-party services for data exchange, employees working on home computers, and potentially insecure wi-fi networks, and the use of remote-access tools like RDP remain to be a headache for corporate infosec teams,’ explains Adrian Hia, managing director for Asia Pacific at Kaspersky.
‘We cannot discount that artificial intelligence modules and algorithms can be used to break corporate log-in and password pairs faster. And once threat actors gain remote access to your corporate computers, the possibility of financial and even reputational damage they can do becomes endless. Businesses here should beef up their endpoint and network security posture to defend themselves against smarter AI-based B ruteforce attacks,’ he adds.
Companies are encouraged to take a step further when it comes to defending their security perimeters. Kaspersky has an integrated software solution that includes a set of functions for event monitoring and management, Kaspersky Unified Monitoring and Analysis Platform.