Thousands of people working for organizations in the public, academia, and defense sectors are being targeted by spear-phishing attacks operated by a threat group called “Midnight Blizzard.” The messages contained a Remote Desktop Protocol (RDP) configuration file connected to the malicious actor’s server.