AnyDesk, which provides a remote desktop application providing access, file transfer, and VPN functionality for endpoints, has announced that its production systems have been compromised, and that it plans to revoke all its security-related certificates and reset all Web portal passwords as a precaution.
AnyDesk also said that it's working with appropriate law enforcement agencies on the incident and that there's so far no evidence of ransomware.
In addition to the internal password rotations, the company urged its customers to update any passwords used across other accounts.
Remote access management tools like AnyDesk are a popular target of cybercriminals.
Last summer both the Cybersecurity and Infrastructure Security Agency and the National Security Agency issued a joint advisory warning that threat actors were using these remote monitoring and management systems, including AnyDesk and ScreenConnect to infiltrate organizations and federal agencies.
This Cyber News was published on www.darkreading.com. Publication date: Mon, 05 Feb 2024 21:50:11 +0000