While everyone waits for BlueKeep to be exploited, another RDP threat is already at the door, according to new research from Sophos.