Windows Remote Desktop Protocol: Remote to Rogue

from The Defender's Advantage Podcast Hosted by Mandiant

Host Luke McNamara is joined by GTIG Senior Security Researcher Rohit Nambiar to discuss Rohit's recent blog on some interesting usage of RDP by UNC5837. Rohit covers the discovery of the campaign, and the novel functionalities they were using to likely support cyber espionage goals. He delves into these findings and the usage of RemoteApps and victim file mapping via RDP, and closes with some of the mysteries that remain about this activity. https://cloud.google.com/blog/topics/threat-intelligence/windows-rogue-remote-desktop-protocol

Episode details come from the podcast's RSS feed.

Embed this episode

Attribution link and audio player

Ready to play

Windows Remote Desktop Protocol: Remote to Rogue

0:00 34:27

No transcript yet.

Requests help us decide what to transcribe next.

Share this episode

Frequently asked questions

How long is this episode of The Defender's Advantage Podcast?

This episode is 34 minutes long.

When was this The Defender's Advantage Podcast episode published?

This episode was published on April 14, 2025.

Can I download this The Defender's Advantage Podcast episode?

Yes. Use the download control on the episode player to save the publisher-provided media file.