AnyDesk suffered cyberattack, assures no user data was compromised

AnyDesk, a widely-used remote desktop software provider, recently confirmed that it fell victim to a cyberattack, resulting in unauthorized access to the company's production systems. The company became aware of the incident after noting irregularities in some of their systems, which prompted a thorough security audit. This audit revealed evidence of compromised production systems.

In response to the breach, AnyDesk activated a remediation and response plan, enlisting the expertise of cybersecurity firm CrowdStrike. The company has announced that this remediation plan has been successfully completed, and the situation is now under control.

The company was quick to clarify that the incident was not a ransomware attack. As part of the remediation process, AnyDesk has revoked all security-related certificates and has either remediated or replaced systems as necessary. The company also plans to revoke the previous code signing certificate for their binaries and has already begun the process of replacing it with a new one.

In terms of user security, AnyDesk's systems are designed to not store private keys, security tokens or passwords that could be exploited to gain access to end user devices. However, as a precautionary measure, the company is revoking all passwords to their web portal, my.anydesk.com, and is advising users to change their passwords if the same credentials are used on other platforms.

Despite the breach, AnyDesk assures its users that there is no evidence to suggest that any end-user devices have been affected. The company has reiterated that it is safe to continue using the service.