Remote desktop application AnyDesk has recently confirmed that it fell victim to a cyberattack. According to Bleeping Computer, hackers managed to gain access to the company’s production systems, including source code and private code signing keys. AnyDesk became aware of the breach after detecting an incident on its production servers. In response, the company promptly activated a response plan with assistance from cybersecurity firm CrowdStrike.
Fortunately, the incident is unrelated to ransomware, and AnyDesk has already informed the relevant authorities. To ensure the security of its systems, the company has taken several measures. It has revoked all security-related certificates and remediated or replaced affected systems as necessary. Additionally, AnyDesk will be replacing its previous code signing certificate for its binaries with a new one.
To further safeguard its users, AnyDesk is revoking all passwords to its web portal, my.anydesk.com. Users are advised to change their passwords if they have been using the same credentials elsewhere. AnyDesk assures users that there is no evidence of any end-user devices being impacted by the attack and assures them that the situation is now under control.
It is worth noting that AnyDesk boasts an impressive clientele, including high-profile customers such as the United Nations, Samsung, Comcast, and NVIDIA.