Post #1854234

Does anyone know if there have been any recent incidents with .rdp phishing? It's been known for ages that getting someone to accept a connection with 'drives' included goes badly; so I was surprised when they just suddenly, with little notice, added a first .rdp scary warning and per-publisher resource options(still no option to just allowlist specific publishers for your environment, it seems). Normally they roll that sort of thing out fairly slowly; so I'm wondering if someone got bitten.