RDP is really useful, but the default setup has no place on the public-facing internet.
The CloudZ Trojan steals data through Microsoft Phone Link. The campaign has been active since at least January 2026.  Follow ...
By the power of Redmond!
CloudZ RAT exploits Phone Link since Jan 2026, stealing credentials and OTPs via Pheno plugin, bypassing 2FA protections.
A previously undocumented .NET trojan and its companion Pheno plugin allow attackers to capture mobile authentication codes ...