{"id":381470,"date":"2026-04-15T22:56:09","date_gmt":"2026-04-15T22:56:09","guid":{"rendered":"https:\/\/www.newsbeep.com\/nz\/381470\/"},"modified":"2026-04-15T22:56:09","modified_gmt":"2026-04-15T22:56:09","slug":"windows-is-getting-stronger-rdp-file-protections-to-fight-phishing-attacks","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/nz\/381470\/","title":{"rendered":"Windows is getting stronger RDP file protections to fight phishing attacks"},"content":{"rendered":"<p>Microsoft has introduced new Windows protections starting with the April 2026 security update to reduce <a href=\"https:\/\/www.helpnetsecurity.com\/2024\/10\/30\/midnight-blizzard-spearphishing-rdp-file\/\" rel=\"nofollow noopener\" target=\"_blank\">phishing attacks that abuse Remote Desktop (.rdp) files<\/a>.<\/p>\n<p>With these updates, the Remote Desktop Connection app displays stronger warning dialogs before a connection is established, shows details about the remote system, and requires users to review any request to share local resources such as drives or the clipboard.<\/p>\n<p>RDP files define how a system connects to a remote computer and can be configured to share local resources such as the clipboard, disk drives, or camera.<\/p>\n<p>Attackers exploit this feature by distributing RDP files through phishing emails. When opened, the file can connect to a server controlled by an attacker and expose local data, including files, stored credentials, and other sensitive information.<\/p>\n<p>How the new Remote Desktop warnings work<\/p>\n<p>Once the update is installed, Windows displays a one-time educational prompt the first time a user opens an RDP file, outlining how these files work and warning about phishing risks.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.newsbeep.com\/nz\/wp-content\/uploads\/2026\/04\/windows_remote_desktop_protection_1.webp.webp\" class=\"aligncenter\" alt=\"Windows Remote Desktop protections\" title=\"Opening Remote Desktop connection\"\/><\/p>\n<p>\u201cAfter you allow RDP file connections in this dialog, it doesn\u2019t appear again for your account,\u201d Microsoft <a href=\"https:\/\/learn.microsoft.com\/en-us\/windows-server\/remote\/remote-desktop-services\/remotepc\/understanding-security-warnings\" target=\"_blank\" rel=\"nofollow noopener\">wrote<\/a>.<\/p>\n<p>Each time an RDP file is opened, Windows displays a security prompt before any connection is made, showing the destination system and listing all requested access to local resources. These options are disabled by default and must be manually approved by the user.<\/p>\n<p>If an RDP file is not digitally signed, Windows cannot verify its origin or integrity and displays a warning dialog labeled \u201cCaution: Unknown remote connection,\u201d with the publisher listed as \u201cUnknown publisher.\u201d<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.newsbeep.com\/nz\/wp-content\/uploads\/2026\/04\/windows_remote_desktop_protections_2.webp.webp\" class=\"aligncenter\" alt=\"Windows Remote Desktop protections\" title=\"Remote Desktop Connection security warning\"\/><\/p>\n<p>When an RDP file is digitally signed, Windows can verify its origin, displaying the publisher\u2019s name in the warning dialog along with a banner titled \u201cVerify the publisher of this remote connection.\u201d<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/www.newsbeep.com\/nz\/wp-content\/uploads\/2026\/04\/windows_remote_desktop_protections_3.webp.webp\" class=\"aligncenter\" alt=\"Windows Remote Desktop protections\" title=\"Remote Desktop Connection security warning\"\/><\/p>\n<p>A digital signature verifies the identity of the entity that created the file and confirms it has not been altered since it was signed. However, a signature does not guarantee a file is safe, as attackers can sign files using names that closely resemble legitimate organizations, the company warned.<\/p>\n<p>Microsoft added that future Windows updates may remove support for older connection settings and advised organizations to transition to the new security dialog.<\/p>\n","protected":false},"excerpt":{"rendered":"Microsoft has introduced new Windows protections starting with the April 2026 security update to reduce phishing attacks that&hellip;\n","protected":false},"author":2,"featured_media":381471,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[111,139,69,145],"class_list":{"0":"post-381470","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-technology","8":"tag-new-zealand","9":"tag-newzealand","10":"tag-nz","11":"tag-technology"},"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts\/381470","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/comments?post=381470"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts\/381470\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/media\/381471"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/media?parent=381470"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/categories?post=381470"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/tags?post=381470"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}