Following indications of an incident on some of AnyDesk’s systems, they conducted a security audit and found evidence of compromised production systems. AnyDesk immediately activated a remediation and response plan involving cyber security experts CrowdStrike. The remediation plan has concluded successfully. The relevant authorities have been notified and AnyDesk are working closely with them. This incident is not related to ransomware.
AnyDesk have revoked all security-related certificates and systems have been remediated or replaced where necessary. AnyDesk will be revoking the previous code signing certificate for their binaries shortly and have already started replacing it with a new one.
AnyDesk’s systems are designed not to store private keys, security tokens or passwords that could be exploited to connect to end-user devices. As a precaution, AnyDesk is revoking all passwords to their Web portal, my.anydesk.com, it is recommended that users change their passwords if the same credentials are used elsewhere.
To date, AnyDesk has no evidence that any end-user devices have been affected. AnyDesk can confirm that the situation is under control and it is safe to use AnyDesk. Please ensure that you are using the latest version, with the new code signing certificate.
The integrity and trust AnyDesk is of paramount importance to them and they are taking this situation very seriously.
If you have any further questions, please do not hesitate to contact us.
 |
|
Copyright © 2024 Data World Computer & Communication Ltd. All rights reserved. |
|