Be careful, this remote control application has just been hacked

German society AnyDesk has confirmed that it has been the victim of a cyberattack. Since a security breach in its information system, hackers have been able to steal the identifiers of numerous accounts.

A few days ago, the TeamViewer application was the source of two infiltrations into two corporate networks, after hackers gained initial access from professional accounts. Today, it is the turn of the German publisher AnyDesk to be the target of a cyberattack.

A security flaw also at AnyDesk

For its part, the German company confirms the attack, while refuting any ransomware. AnyDesk, however, promises to have immediately initiated a remediation plan.

Remember that AnyDesk has no less than 170,000 customers, including Samsung, LG Electronics, MIT, NVIDIA, Siemens, Thales and the UN.

“ Our systems are designed not to store private keys, security tokens or passwords that can be exploited to log into user devices », Specified the company AnyDesk in an official press release.

AnyDesk accounts for sale on the dark web

Since the beginning of February, AnyDesk credentials have been for sale on the dark web, the compromised credentials having likely been stolen via malware. In total, more than 30,000 accounts could be affected depending on Resecurity.

One of the hackers notably put up for sale a list of 18,317 accounts, at a price of $15,000, to be paid in Bitcoin or Monero. Obviously, users are strongly encouraged to change their password as soon as possible.

Remember that the connection to the AnyDesk web portal was deactivated from January 29 to February 1, officially for “ maintenance operations “.

Source : The Hacker News