Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 23:17:24 UTC Home > List all groups > List all tools > List all groups using tool RDP Tool: RDP Names RDP Remote Desktop Protocol Category Tools Type Backdoor Description (Wikipedia) Remote Desktop Protocol (RDP) is a proprietary protocol developed by Microsoft, which provides a user with a graphical interface to connect to another computer over a network connection. The user employs RDP client software for this purpose, while the other computer must run RDP server software. Clients exist for most versions of Microsoft Windows (including Windows Mobile), Linux, Unix, macOS, iOS, Android, and other operating systems. RDP servers are built into Windows operating systems; an RDP server for Unix and OS X also exists. By default, the server listens on TCP port 3389 and UDP port 3389. Information Last change to this tool card: 20 April 2020 Download this tool card in JSON format All groups using tool RDP Changed Name Country Observed APT groups   Sweed [Unknown] 2017-2019   Other groups https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=826ad6c0-b07d-473e-a5ff-f0af8546ccfa Page 1 of 2 Achilles [Unknown] 2018-Oct 2018     Fxmsp 2016-Jul 2020 3 groups listed (1 APT, 2 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=826ad6c0-b07d-473e-a5ff-f0af8546ccfa https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=826ad6c0-b07d-473e-a5ff-f0af8546ccfa Page 2 of 2