In 2021, a group of attackers, reportedly using a combination of social engineering and exploit kits, successfully breached the aloof RDP server. The attackers used a multi-stage attack, which included:

The 2021 Crackdown on Aloof RDP Servers: What You Need to Know