Cloud Atlas APT Group Modifies termsrv.dll to Enable Multiple RDP Sessions on Vi

A well-known advanced persistent threat group called Cloud Atlas has been caught using a dangerous technique to hijack Windows systems without alerting anyone on the network. The group modifies a core Windows file called termsrv.dll to unlock multiple simultaneous Remote Desktop Protocol (RDP) sessi

Source: Cybersecurity News