The author of a newly discovered ransomware family is hacking into remote desktop services to upload the malware alongside a bunch of other tools.
Article Link: http://feedproxy.google.com/~r/Securityweek/~3/AvfaOFki3pc/rsautil-ransomware-distributed-rdp-attacks