Keep threats out of your Windows system.

RDS-Shield integrated solution will protect you against Remote Desktop attacks.

01

Is your Remote Desktop secure ?

At the risk of stating the obvious, cyber security – protecting business, supplier and customer data from nasty and damaging digital intruders, should now be a high priority for every organization. As a discipline up there with delivering products and services, it’s probably fair to say that most of us should be doing more in terms of cyber security. The risks and consequences cannot be underestimated and clearly, the problem is not going to go away anytime soon.

We know that digital technologies have a lot of upsides. But this flip side needs to be addressed firmly, with commensurate force and commitment.

No longer an ‘if’ question, cyber-crime is undoubtedly a ‘when’. Following a recent survey, one chamber of commerce reported that around 55% of firms in a single county have been hit in the past two years. In terms of business risks and associated consequences, Remote Desktops must be shielded and protected.

02

Plain Facts.

A breach in Remote Desktop security can easily have massive and destructive consequences to a business; an attack could ultimately cause business failure.

Every time RDS servers gets breached, there’s no place for “lucky old us, we weren’t the victim”, relief. More so these should be very pointed wake-up calls that the “next time it could be us”. The odds are shortening all the time and it’s imperative to ensure that all the ‘locks and alarms’ are kept in tip top condition.

Being very afraid is ok – while at the same time ensuring that the business can continue operationally is also essential. We mustn’t let the cyber villains win.

03

The basics.

In terms of security, a good place to start is to ensure the basics are firmly in place. Fully maintained anti-virus provisions are possibly number one but for Remote Desktop concerns it is far not enough. Best practice password disciplines are equally fundamental and increasingly vital. It’s important to provide everyone with a secured Remote Desktop environment and RDS-Shield has been designed to spot a possible inbound attack and prevent suspicious event.

04

Best practice.

Looking to Windows basic security rules usually reveals the sinister truth. In short, Windows GPOs, NFTS rules, checking event logs should become second nature but it’s time consuming and complex tasks for which few administrators are comfortable with. RDS-Shield will do this crucial and mandatory jobs in minutes without any expert skills.

To put things into context : whilst it is usual to test our fire alarms regularly what about cyber security on your Remote Desktop Servers? Not quite so easy, but given the heightened probabilities for a cyber-crime, defenses should at least comprise an action plan to review, ideally enhance business data security. In short, no one should take the eye off the unpredictable Remote Desktop cyber-crime ball. One day it will bounce right where it could so easily hurt your business, your customers and trading partners, very badly.

RDS-Shield helps our customers protect their businesses from Remote Desktop cyber attack.

Download and test RDS-Shield for free and you will very pleased to see how powerful this protection is for your RDS servers.

User Beware: Cyber Criminals Know You Use Remote Desktop systems

Remote desktop is a common feature in operating systems. It allows a user to log into an interactive session with a system desktop graphical user interface on a remote system. Microsoft refers to its implementation of the Remote Desktop Protocol (RDP) as Remote Desktop Services (RDS).
Adversaries may connect to a remote system over RDP/RDS to expand access if the service is enabled and allows access to accounts with known credentials. Adversaries will likely use Credential Access techniques to acquire credentials to use with RDP. Adversaries may also use RDP in conjunction with the Accessibility Features technique for Persistence.
It would be fairly reasonable to assume that the majority of security risks would be undertaken by running a RDS server, and there were some quite infamous exploits of it in the past, for example vulnerability to the pass-the-hash or MiTTM attacks on non-encrypted connections. We probably still all remember disabling Remote Assistance and removing associated port exceptions in firewalls as one of the first things we did upon installing Windows. But risks involved in using a RDP client don’t seem so self-obvious.
While you will not be able to find documentation on self-propagating exploits (i.e. viruses, trojans, or worms) taking advantage of Remote Desktop Connections through the use of the updated RDP protocol clients, there are still some risks involved with connecting to RDP servers:

User activity

User activity tracking and key logging: In essence, RDP server could log all your activity on the server, including websites you browse to, files you download, documents you accessed and were changing, passwords you entered to access remote services through the RDP server, basically keep track of your complete user session.

s

Infection

Infection of client through remote hosted files: Any files you download from the server hosting a RDP session could be tampered with, or infected with malware. You could falsely assume trust in any of these files, thinking since you put them there during your previous RDP session that they weren’t tampered with or infected in the meantime, transfer them to your RDP client and open/execute/…

Man-in-the-middle

Man-in-the-middle: Similar to user activity tracking, only this time the attacker is active on the RDP server you connect to and is listening in on your RDP client to RDP server connection, RDP server to remote LAN / WAN connections, or possibly both. On top of being able to inspect contents of exchanged network packets, man-in-the-middle is also able to change their contents. The RDP session can be encrypted using TLS, effectively preventing eavesdropping on it, but that isn’t necessarily the case with where else you connect to (remote LAN or WAN) using the RDP server.

Social engineering

Social engineering attacks: You could be a victim of a social engineering attack where the attacker gains your trust under false pretense, and cons you into entering a RDP server address that you believe can be trusted in your RDP client while establishing a new session, but the address you entered is actually of attacker’s choosing. The attacker could host a RDP server on that address for the sole purpose of recording your login credentials for another, real RDP server you intended to connect to.

“Sandboxing is one example of this important new technology to combat advanced threats. The user Remote Desktop is strictly limited to one application and the user environment is restricted to this single application. It is the unique advantages of a tightly integrated combination of technologies, unified with RDS-Shield threat intelligence into a complete solution, to counter RDP cyber attacks.”

06Sally Leung, CEO of AADS WorldWide

100% Attacks responsive.

As we’ve seen in news headlines over and over, even major brands with dedicated security teams fall victim to advanced targeted attacks. With Verizon alone investigating nearly 80,000 security incidents (per its Data Breach Investigation Report), you need to be sure your organization is prepared to defend against these threats.

icon_00against ever evolving cyber threats

icon_00investigate hostile actions in cyberspace

icon_00architectures with cutting edge analysis

Ready to drive more Security Rules in few simples clicks?

Really, with RDS-Shield you have the easyest solution to increase dramaticaly the Security of your Remote Desktop Server. You don't have 15 minutes to discover it ? Seriously, take your watch and try RDS-Shield.

Download RDS-Shield now