Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

“RDP shops” are illicit online services that advertise access to computers whose Remote Desktop Protocol credentials have been compromised. McAfee’s July 2018 investigation documented listings ranging from ordinary computers to a system it associated with an anonymized U.S. airport—but it did not buy access, verify what a buyer could do, or find that passenger safety was at risk. The findings are historical, not a measure of what these shops contain today.

What an RDP shop sells—and what RDP itself does

Remote Desktop Protocol (RDP) is a Microsoft-developed protocol that lets a user interact with another computer through a graphical interface. Organizations use it for legitimate remote administration. In the criminal context described by McAfee, an RDP shop advertised credentials or access to systems that had been compromised.

McAfee’s 2018 investigation found listings for Windows XP through Windows 10 and Windows Server 2008 and 2012. Some shops also advertised stolen personal and financial information. Researchers observed identical systems listed in more than one shop, suggesting that some venues resold access rather than offering unique inventories. McAfee Advanced Threat Research’s July 11, 2018 report is the source for these observations.

What the reported shop inventories show—and what they do not

In its 2018 sample, McAfee examined shops listing inventories from 15 to more than 40,000 RDP connections. It identified UAS as the largest active shop in that sample and reported that the listed stock of larger shops changed by about 10% from day to day. Those numbers describe the shops and listings researchers observed then; they are neither a census of the dark web nor evidence of current inventory.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Easytone Backlit Mini Wireless Keyboard with Touchpad Mouse Combo Remote Control with Rechargeable Li-ion Battery and Multimedia Keys for Android TV Box HTPC PS3 Smart TV PC X-Box Linux Windows MacOS
  • 【Easy to Connect & Use】The mini wireles keyboard remote is connected via USB receiver(included) and the work distance up to 10 meters. Just plug and play. very easy to connect and use. Powerful function (keyboard + touchpad + mouse) very perfect for browsing the web, playing games or watching TV.
  • 【Widely Compatibility】The mini keyboard with touchpad can be used for Android TV box, smart TV, PC, Pad, Raspberry PI, PS3, x-box, desktop, laptop, smart phone,HTPC/IPTV, etc. If there is not a USB port, you need to prepare a OTG cable.
  • 【Mutil-Colors Backlit and Rechargeable Battery】The USB mini keyboard has mutil-colors of backlit mode which can clear operate the keys when work at night, don't need to turn on the light which disturbing your families. With auto sleep and wake-up function, and comes with a rechargeable Li-ion battery, it can work for a long time.
  • 【Portable Keyboard】 This small keyboard is designed Small and handheld design, has a innovative shape and petite size, takes up very minimal space in you bag and just makes you say goodbye to chunky keyboard to horizon a new experience of office entertainment anywhere, anytime.
  • 【Sensitive Touchpad & Hotkeys】Wireless mini keyboard with multi-finger touchpad and combo with 8 hotkeys can easy and accurate manipulation. Easy to type and copy / paste, making it faster and more convenient for you browse the page.

A later study examined a different part of the market: Trend Micro analyzed more than 900 access-broker advertisements from January through August 2021. It reported that 43% of those advertisements targeted Europe, 24% North America, and 14% Asia. These are shares within Trend Micro’s analyzed listings, not estimates of all criminal access or a direct comparison with McAfee’s shop-inventory counts. Trend Micro’s access-as-a-service analysis describes its sample and period.

Trend Micro also described brokers offering filters such as country, city, operating system, port, and administrator rights, with some listings extending to VPN, shell, webmail, cloud, and other forms of access. That 2021 snapshot illustrates how access brokering could reach beyond RDP; it does not establish what any particular shop offers now.

Rank #2
(Backlit Version)REIIE H9+ Mini Keyboard,2.4GHz Wireless Mini Handheld Smart TV Remote Keyboard with Touchpad for PC,Raspberry Pi 2, Pad, Smart TV, Android TV Box, Windows 7 8 10(Not Suport Bluetooth)
  • 【Before Purchasing】The keyboard uses 2.4G connection technology.Please make sure your device has an available USB port to insert the receiver.If not, the keyboard is not suitable for your device
  • 【Be sure to recharge the batteries for 1 hour before use】For the safety of transportation, the battery is nearly empty when you receive the device. When the battery is low, 2.4G cannot be paired or the connection is unstable
  • 【Perfect combo】73 keys Wireless QWERTY keyboard + Touchpad,Key layout in line with the universal keyboard layout, fully functional, plug and play,White soft backlight design, use in the dark also unimpeded
  • 【Multi-finger touchpad】a single finger click as left mouse function, two-finger click as the right mouse function, double finger drag as the rolling, bringing more convenience to your use
  • 【Multifunctional mini wireless keyboard】3 in 1 Multifunction 2. 4GHz Mini Wireless QWERTY keyboard+ touchpad + LED Backlit(Fn+Win)

What McAfee reported about the airport-related listing

McAfee said it found a shop listing for a Windows Server 2008 R2 Standard machine described by the seller as located in a U.S. city. The listing offered administrator access for US$10 and concealed part of the IP address. Using open-source information, researchers identified a match associated with a major international airport. They found account names linked to companies involved in airport security and building automation, as well as a separate system associated with an automated passenger transit system.

Those details describe a listing and the researchers’ identification of associated systems—not a demonstration of what an attacker could control. McAfee said it did not explore the full level of access represented by all accounts, did not purchase access or other products, and could not assess the quality of what was offered. The airport was anonymized, and McAfee said passenger safety was not at risk. Contemporary coverage reported that the company worked with the airport’s IT team to remove exposed credentials and patch systems. Dark Reading’s July 11, 2018 coverage reported the airport response and quoted McAfee’s John Fokker.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Rii BT/2.4G Mini Keyboard with Touchpad, Backlit, Rechargeable for Android TV, PC, Smart TV
  • 【Bluetooth & 2.4Ghz RF Connection】Support bluetooth 4.0, which makes the connection faster and more stable. Built-in Bluetooth (No Bluetooth Dongle) and a 2.4Ghz USB dongle, you can pair and connect Bluetooth devices and USB devices, operating distance can reach 33ft/10M.
  • 【Touchpad and Hotkeys】Mini keyboard wireless with responsive touchpad supports multi-finger gestures for a precise control. Support rich hotkeys for quick control of many pages.
  • 【Backlit Mini Keyboard】 Backlight keyboard allows you to operate the multimedia keyboard clearly in the dark.
  • 【Rechargeable Handheld Keyboard Remote】 Built-in a rechargeable Li-ion battery. With the auto-sleep function, it can work for a long time.
  • 【Widely Compatibility】Mini bluetooth keyboard & 2.4Ghz wireless keyboard for Amazon Fire TV Stick 4K/ Lite/Cube, Android TV Box, Smart TV, Raspberry pi, Xbox 360, PS3, HTPC, IPTV, Pad, PC

How criminals were reported to misuse compromised access

McAfee described several uses promoted or observed in connection with RDP access: false-flag activity, spam, account abuse and credential harvesting, extortion, cryptomining, and ransomware. Its December 2018 threat report said RDP shops remained popular through that quarter and connected them with credit-card fraud, cryptomining, ransomware, and account fraud. These are documented use cases, not a claim that every stolen login leads to ransomware. McAfee Labs’ December 2018 Threats Report provides the quarterly follow-up.

McAfee also described attempts to break into internet-accessible RDP services using password dictionaries and credentials exposed in data breaches. The practical implication is that exposed remote access and reused or weak credentials can create opportunities for unauthorized entry; there is no need to reproduce attack procedures to understand the risk.

Rank #4
Sale
Arteck 2.4G USB Wireless Keyboard Full Size Keyboard for Computer/PC/Laptop
  • Easy Setup: Simply insert the nano USB receiver into your computer and use the keyboard instantly. Arteck 2.4G Wireless Keyboard Stainless Steel Ultra Slim Full Size Keyboard with Numeric Keypad for Computer/Desktop/PC/Laptop/Surface/Smart TV and Windows 10/8/ 7 Built in Rechargeable Battery
  • Ergonomic design: Stainless steel material gives heavy duty feeling, low-profile keys offer quiet and comfortable typing.
  • 6-Month Battery Life: Rechargeable lithium battery with an industry-high capacity lasts for 6 months with single charge (based on 2 hours non-stop use per day).
  • Ultra Thin and Light: Compact size (16.9 X 4.9 X 0.6in) and light weight (14.9oz) but provides full size keys, arrow keys, number pad, shortcuts for comfortable typing.
  • Package contents: Arteck Stainless 2.4G Wireless Keyboard, nano USB receiver, USB charging cable, welcome guide, our 24-month warranty and friendly customer service.

How organizations can reduce RDP exposure

McAfee’s 2018 recommendations address different layers of risk. Reducing internet exposure limits who can reach the service; stronger authentication makes stolen or guessed passwords less useful; controls on repeated failures slow or block login attempts; and log review helps surface suspicious activity. The following measures reflect the guidance in its 2018 report:

  • Limit exposure: Avoid allowing RDP connections from the open internet. Where remote access is needed, restrict it to approved routes and users.
  • Strengthen sign-in: Use complex passwords and two-factor authentication. A FIDO2-compatible hardware security key may be one option only where the organization’s identity system supports it; McAfee’s recommendation was for two-factor authentication generally, not a specific key or vendor.
  • Control repeated failures: Lock out accounts and block or time out IP addresses after too many failed login attempts.
  • Review activity: Regularly check event logs for unusual logon attempts.
  • Use non-revealing account names: Avoid account names that disclose organizational information.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

How to read the historical evidence

The 2018 McAfee findings concern observed RDP-shop inventories and a specific investigation; the 2021 Trend Micro findings count access-broker advertisements from a later, different sample. Their units, methods, and dates differ, so the figures should not be combined into a market-size trend. Neither study establishes the current number of shops, their present inventory, or whether any named venue still operates.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Best Value
Sale
Fosmon Mini Keyboard with Touchpad Mouse, 2.4G Wireless+ Bluetooth, Backlit
  • Compact and Portable QWERTY Keyboard with Touchpad: Innovative and compact QWERTY keyboard with touchpad that provides comfort combined with the freedom of wireless connectivity. Connect to all of your favorite devices with this wireless keyboard. This controller gives you everything you need right in the palm of your hand. Navigate the cursor easily with your thumb without having to touch your screen, mouse or keyboard
  • 2.4ghz and 5.2 Bluetooth Compatibility: This keyboard connects to a multitude of devices through 5.2 Bluetooth and a 2.4ghz nano USB dongle such as for: Apple TV, Amazon Fire Stick, Google TV, Playstation PS4/PS4 Pro/PS5, HTPC/IPTV, VR Glasses (Virtual Reality Headset Box) smartphones (iOS/Android/Windows), notebooks, laptops (Windows/Mac OS X v10.7 Lion and above) and more. With a working range of approx. 33ft/10m, easily connect and control Bluetooth devices with this wireless keyboard. (Not Compatible with Xbox series).
  • Long-Lasting Rechargeable Battery: Built-in rechargeable lithium-ion battery with up to 10 days of continuous working time and up to 50 days of standby time. The LED indicators notify when the battery is low and when it is fully charged. Charging via the included USB-C cable is simple and easy
  • Backlit Keyboard: The convenient backlit keyboard is perfect for using in a dark environment
  • Limited Lifetime Warranty: We cannot guarantee compatibility with all smart T.V.s. Please check the Bluetooth capability of your T.V. before purchase

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.