Remote desktop software provides interactive access to a computer over a network, letting a user view the screen, move the mouse, and run programs as if sitting at the machine. Common examples include RDP clients, VNC tools, and remote support platforms used by IT teams. In cyber security, these tools matter because they create a real operator-controlled session, not just a file transfer or one-time exploit.
Attackers abuse remote desktop software to gain hands-on-keyboard control after phishing, credential theft, or social engineering. Because the software is often legitimate and sometimes digitally signed, it can blend in with normal administration and evade controls that focus only on malware. Defenders should inventory approved tools, restrict who can install or launch them, require strong authentication, and monitor for unusual sessions, unexpected outbound connections, and email-delivered installers. Used well, remote desktop software is a support tool; used by an intruder, it becomes a control plane for lateral movement and persistence.