AnyDesk Faces Cyber Attack: Production Systems Compromised, Certificates Revoked

AnyDesk, the remote desktop software provider, disclosed a recent cyber attack revealing compromised production systems. While assuring users it's not a ransomware attack, AnyDesk revoked all security-related certificates, replaced or remediated affected systems, and initiated a new code signing certificate. In a cautionary move, all passwords to the web portal were revoked, prompting users to update passwords, and the company urged the download of the latest software version. Although the exact breach timeline is undisclosed, AnyDesk assured no evidence indicates end-user systems were affected. Cybersecurity firm Resecurity later found threat actors advertising customer credentials for sale, emphasizing the urgency for users to reset passwords to mitigate potential risks.