Attackers have long-established methods of gaining access to organizations’ private systems or endpoints, and typically, those uses for carrying out double extortion are no different:
Phishing
Malware
Vulnerability exploits
Brute-forcing an RDP server
Stolen credentials
Read more.