Skip to main content

Hackers can purchase government login credentials for cheap on the dark web

McAfee’s Advanced Threat Research team recently discovered that hackers have access to many organizations that have weak credentials when using Microsoft’s Remote Desktop component in Windows-based systems. Access to these organizations — whether it’s an airport, a hospital or the U.S. government — can be bought for little money through specific shops on the dark web.

Microsoft’s Remote Desktop Protocol (RDP) essentially allows you to connect and use a Windows-based PC from a remote location. When those login credentials are weak, hackers can use brute force attacks to gain the username and password for each connection. McAfee found connections up for sale across various RDP shops on the dark web ranging between a mere 15 to a staggering 40,000 connections.

“The advertised systems ranged from Windows XP through Windows 10,” says John Fokker, McAfee’sHead of Cyber Investigations. “Windows 2008 and 2012 Server were the most abundant systems, with around 11,000 and 6,500, respectively, for sale. Prices ranged from around $3 for a simple configuration to $19 for a high-bandwidth system that offered access with administrator rights.”

Among the list of devices, services and networks on the menu are multiple government systems on sale worldwide, including those linked to the United States. The team found connections to a variety of healthcare institutions including medical equipment shops, hospitals, and more. They even found access to security and building automation systems at a major international airport selling for a mere $10.

The problem doesn’t just revolve around desktops, laptops, and servers. Internet of Things devices based on Windows Embedded are also on the menu such as point-of-sale systems, kiosks, parking meters, thin client PCs and more. Many are overlooked and not updated, making them a quiet entryway for hackers.

Black market sellers gain RDP credentials by scanning the internet for systems that accept RDP connections, and then use tools like Hydra, NLBrute and RDP Forcer to attack the login using stolen credentials and password dictionaries. Once they successfully log into the remote PC, they don’t do anything but put the connection details up for sale.

After hackers pay for a connection, they can bring a corporation down to its knees. For instance, a hacker could pay a mere $10 for a connection, infiltrate the network to encrypt the files of every PC, and demand a $40,000 ransom. Compromised PCs can also be used to deliver spam, misdirect illegal activity and mine cryptocurrency. Access is also good for stealing personal information and company trade secrets.

“We found a newly posted Windows Server 2008 R2 Standard machine on the UAS Shop,” Fokker writes. “According to the shop details, it belonged to a city in the United States and for a mere $10 we could get administrator rights to this system. UAS Shop hides the last two octets the of the IP addresses of the systems it offers for sale and charges a small fee for the complete address.”

The solution, according to McAfee, is that organizations need to do a better job at checking all their virtual “doors and windows” so hackers can’t sneak in. Remote access should be secure and not easily exploitable.

Editors' Recommendations

Kevin Parrish
Former Digital Trends Contributor
Kevin started taking PCs apart in the 90s when Quake was on the way and his PC lacked the required components. Since then…
This 16-inch HP Omen gaming laptop deal cuts the price by 38%
The HP Omen 16 gaming laptop on a desk.

Head to HP, where you’ll find one of the better gaming laptop deals around right now: a massive $500 off the HP Omen 16-inch gaming laptop. It usually costs $1,300, but today you can buy this particular model for just $800, surely a tempting offer for many gamers. If you’re keen to learn more, keep reading and we’ll explain everything you need to know before you buy.

Why you should buy the HP Omen 16-inch gaming laptop
HP isn’t one of the best gaming laptop brands, but it does feature in our look at the best laptop brands thanks to its stylish designs. With the HP Omen 16-inch gaming laptop, you get an AMD Ryzen 5 7640HS processor teamed up with 16GB of memory and 512GB of SSD storage. More importantly is its graphics card -- an Nvidia GeForce RTX 4050 with 6GB of dedicated VRAM. Combined, these are all the specs you need for some basic but respectable gaming on the move.

Read more
How to install Android apps on Windows 11
Android App running on a Windows 11 PC

The best way to install Android apps on Windows 11 is to do so via the Amazon Appstore. In order to do that, you'll need to set up the Windows Subsystem for Android (if it's not already set up on your PC), install the Amazon Appstore app, and enable virtualization if prompted. In this guide, we'll show you how to do all of that so you can start installing Android apps on your Windows 11 PC.

Read more
This powerful HP Omen gaming PC is $650 off for a limited time
HP Omen 45L sitting on a table.

You're going to have to shell out a significant amount if you want to buy a powerful gaming desktop, but you can enjoy some savings along the way if you take advantage of gaming PC deals. Here's an offer we recommend -- a $650 discount on this particular configuration of the HP Omen 45L that usually costs $2,050, bringing its price down to only $1,400. It's still not cheap, especially considering you'll also have to get a decent gaming display from monitor deals, but you won't want to miss the value that you'll get from this limited-time offer.

Why you should buy the HP Omen 45L gaming desktop
The HP Omen 45L is mentioned in our roundup of the best gaming PCs as an excellent choice for beginners because it comes with powerful components and it's easy to upgrade. You'll be getting the 13th-generation Intel Core i7 processor with 16GB of RAM, which our guide on how much RAM do you need says is a great place to start for a gaming desktop. It also comes with the Nvidia GeForce RTX 4060 Ti as its graphics card. With these specifications, the HP Omen 45L can comfortably run the best PC games, and it could even be enough for the upcoming PC games of the next couple of years as long as you're not selecting the highest graphics settings.

Read more