#anydesk — Public Fediverse posts

From Invoice to AnyDesk: Uncovering a Phishing Campaign Targeting Russian Aerospace Organizations

A sophisticated spear-phishing campaign targeting Russian aerospace and aviation organizations has been identified, likely attributed to the Rare Werewolf threat group. The attack begins with fraudulent emails impersonating a legitimate Russian aerospace research institute, delivering password-protected archives containing malicious installers. The campaign employs living-off-the-land techniques, abusing legitimate tools including AnyDesk, Blat, WinRAR, and Tray Minimizer to establish persistent remote access. The attack chain deploys portable AnyDesk with unattended access configured using a predefined password, exfiltrates configuration data via SMTP to attacker-controlled infrastructure, and establishes persistence through scheduled tasks. The operators conceal their activities by minimizing the AnyDesk interface and removing forensic artifacts. This methodology aligns with previously documented Rare Werewolf campaigns targeting strategically important sectors across Russia, Belarus, and Kazakhstan, par...

Pulse ID: 6a4f858d17f60f10d1e16c2c
Pulse Link: https://otx.alienvault.com/pulse/6a4f858d17f60f10d1e16c2c
Pulse Author: AlienVault
Created: 2026-07-09 11:27:09

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#AnyDesk #Belarus #CyberSecurity #Email #InfoSec #Kazakhstan #Nim #OTX #OpenThreatExchange #Password #Phishing #RAT #Russia #SpearPhishing #Troll #WinRAR #Word #bot #AlienVault

From Invoice to AnyDesk: Uncovering a Phishing Campaign Targeting Russian Aerospace Organizations

A sophisticated spear-phishing campaign targeting Russian aerospace and aviation organizations has been identified, likely attributed to the Rare Werewolf threat group. The attack begins with fraudulent emails impersonating a legitimate Russian aerospace research institute, delivering password-protected archives containing malicious installers. The campaign employs living-off-the-land techniques, abusing legitimate tools including AnyDesk, Blat, WinRAR, and Tray Minimizer to establish persistent remote access. The attack chain deploys portable AnyDesk with unattended access configured using a predefined password, exfiltrates configuration data via SMTP to attacker-controlled infrastructure, and establishes persistence through scheduled tasks. The operators conceal their activities by minimizing the AnyDesk interface and removing forensic artifacts. This methodology aligns with previously documented Rare Werewolf campaigns targeting strategically important sectors across Russia, Belarus, and Kazakhstan, par...

Pulse ID: 6a4f858d17f60f10d1e16c2c
Pulse Link: https://otx.alienvault.com/pulse/6a4f858d17f60f10d1e16c2c
Pulse Author: AlienVault
Created: 2026-07-09 11:27:09

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#AnyDesk #Belarus #CyberSecurity #Email #InfoSec #Kazakhstan #Nim #OTX #OpenThreatExchange #Password #Phishing #RAT #Russia #SpearPhishing #Troll #WinRAR #Word #bot #AlienVault

リモートデスクトップ接続アプリ「AnyDesk」に未修正の脆弱性2件、ZDIがゼロデイ公表／ローカルからのDoS攻撃につながるおそれ
https://forest.watch.impress.co.jp/docs/news/2123755.html

#forest_watch_impress #AnyDesk #セキュリティ #脆弱性 #Windows #インターネット #ネットワーク #システム_ファイル #デスクトップ

Anonymous GitHub account dropping undisclosed #0days… 👀

#7Zip
#AnyDesk
#CAres
#Docker
#FFmpeg
#Firefox
#FlociAPIGateway
#Flowise
#Ghidra
#GiteaActRunner
#ImageMagickGhostscript
#Libssh2
#LunarClientModrinth
#MyBB
#Nghttp2Nghttpx
#Nmap
#Objdump
#OpenVPNConnect
#PHP
#RustDesk
#SystemInformer
#VLC

https://github.com/bikini/exploitarium

Anonymous GitHub account dropping undisclosed #0days… 👀

#7Zip
#AnyDesk
#CAres
#Docker
#FFmpeg
#Firefox
#FlociAPIGateway
#Flowise
#Ghidra
#GiteaActRunner
#ImageMagickGhostscript
#Libssh2
#LunarClientModrinth
#MyBB
#Nghttp2Nghttpx
#Nmap
#Objdump
#OpenVPNConnect
#PHP
#RustDesk
#SystemInformer
#VLC

https://github.com/bikini/exploitarium

Anonymous GitHub account dropping undisclosed #0days… 👀

#7Zip
#AnyDesk
#CAres
#Docker
#FFmpeg
#Firefox
#FlociAPIGateway
#Flowise
#Ghidra
#GiteaActRunner
#ImageMagickGhostscript
#Libssh2
#LunarClientModrinth
#MyBB
#Nghttp2Nghttpx
#Nmap
#Objdump
#OpenVPNConnect
#PHP
#RustDesk
#SystemInformer
#VLC

https://github.com/bikini/exploitarium

Anonymous GitHub account dropping undisclosed #0days… 👀

#7Zip
#AnyDesk
#CAres
#Docker
#FFmpeg
#Firefox
#FlociAPIGateway
#Flowise
#Ghidra
#GiteaActRunner
#ImageMagickGhostscript
#Libssh2
#LunarClientModrinth
#MyBB
#Nghttp2Nghttpx
#Nmap
#Objdump
#OpenVPNConnect
#PHP
#RustDesk
#SystemInformer
#VLC

https://github.com/bikini/exploitarium

Anonymous GitHub account dropping undisclosed #0days… 👀

#7Zip
#AnyDesk
#CAres
#Docker
#FFmpeg
#Firefox
#FlociAPIGateway
#Flowise
#Ghidra
#GiteaActRunner
#ImageMagickGhostscript
#Libssh2
#LunarClientModrinth
#MyBB
#Nghttp2Nghttpx
#Nmap
#Objdump
#OpenVPNConnect
#PHP
#RustDesk
#SystemInformer
#VLC

https://github.com/bikini/exploitarium

https://www.europesays.com/ee/186337/ EKSPERT SELGITAB Nii õnnestus telefonipetturitel varastada kunstnike liidult 700 000 eurot – Postimees #andmeleke #AnyDesk #apotheka #BreakingNews #BreakingNews #DianaPoudel #EE #Eesti #EestiKeel #EestiKunstnikeLiit #Estonia #Estonian #FeaturedNews #FeaturedNews #Headlines #kaugjuhtimistarkvara #küberpettus #LatestNews #LatestNews #News #PopulaarseimadLood #RaitPikaro #SmartID #TeamViewer #telefonipettus #TopStories #TopStories #ÜldisedUudised #Uudised #ViimasedUudised

📬 Malware per WhatsApp. Der Rest läuft auf Windows
#Cyberangriffe #AnyDesk #BackblazeB2 #MSIPakete #Persistenz #TencentCloud #VBSDatei #WhatsApp https://sc.tarnkappe.info/8a4894

📬 Malware per WhatsApp. Der Rest läuft auf Windows
#Cyberangriffe #AnyDesk #BackblazeB2 #MSIPakete #Persistenz #TencentCloud #VBSDatei #WhatsApp https://sc.tarnkappe.info/8a4894

Went to the village shop to get some food and returned to find the PC fully locked up ( needed a power cycle to restart!)

I suspect this is more fault of #browsers with multiple tabs left open (there's an open issue for this on #Firefox) than any flaw with #LinuxMint itself, on top of websites being more bloated and #adtech scripts and #adblockers fighting one another.

Successfully installed #Anydesk on #Linux PC, so can access #XFCE desktop remotely from my Windows laptop (we use Anydesk a lot for remote support)

Went to the village shop to get some food and returned to find the PC fully locked up ( needed a power cycle to restart!)

I suspect this is more fault of #browsers with multiple tabs left open (there's an open issue for this on #Firefox) than any flaw with #LinuxMint itself, on top of websites being more bloated and #adtech scripts and #adblockers fighting one another.

Successfully installed #Anydesk on #Linux PC, so can access #XFCE desktop remotely from my Windows laptop (we use Anydesk a lot for remote support)

full uninstall of Anydesk from macOS

https://nicolalosito.it/2026/01/13/full-uninstall-of-anydesk-from-macos/

Lees tip -> Tilburg: man doet zich voor als FIOD-medewerker en steelt geld en sieraden | Een man in Tilburg is opgelicht door iemand die zich voordeed als FIOD-medewerker. De politie zoekt de verdachte en roept getuigen op zich te melden. | #Anydesk #cybercrime #Fiod #fraude #geld #MeldMisdaadAnoniem #oplichting #Opsporingstiplijn #politie #politieonderzoek #sieraden #tilburg #Verdachte |

https://hbpmedia.nl/fiod-oplichter-tilburg-geld-en-sieraden-gestolen/

Lees tip -> Tilburg: man doet zich voor als FIOD-medewerker en steelt geld en sieraden | Een man in Tilburg is opgelicht door iemand die zich voordeed als FIOD-medewerker. De politie zoekt de verdachte en roept getuigen op zich te melden. | #Anydesk #cybercrime #Fiod #fraude #geld #MeldMisdaadAnoniem #oplichting #Opsporingstiplijn #politie #politieonderzoek #sieraden #tilburg #Verdachte |

https://hbpmedia.nl/fiod-oplichter-tilburg-geld-en-sieraden-gestolen/

MostereRAT Targets Windows, Uses AnyDesk and TightVNC for Full Access – Source:hackread.com https://ciso2ciso.com/mostererat-targets-windows-uses-anydesk-and-tightvnc-for-full-access-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #MostereRAT #Hackread #Phishing #security #TightVNC #AnyDesk #malware #Windows #Fraud #Japan

MostereRAT Targets Windows, Uses AnyDesk and TightVNC for Full Access – Source:hackread.com https://ciso2ciso.com/mostererat-targets-windows-uses-anydesk-and-tightvnc-for-full-access-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #MostereRAT #Hackread #Phishing #security #TightVNC #AnyDesk #malware #Windows #Fraud #Japan

MostereRAT Targets Windows, Uses AnyDesk and TightVNC for Full Access https://hackread.com/mostererat-windows-anydesk-tightvnc-access/ #MostereRAT #Security #Phishing #TightVNC #Malware #AnyDesk #Windows #Fraud #Japan

MostereRAT Targets Windows, Uses AnyDesk and TightVNC for Full Access https://hackread.com/mostererat-windows-anydesk-tightvnc-access/ #MostereRAT #Security #Phishing #TightVNC #Malware #AnyDesk #Windows #Fraud #Japan

#AnyDesk 9.5.9 has been released (#RemoteDesktop / #RemoteAccess / #RemoteAssistance / #RemoteSupport / #RemotePC / #RemoteSoftware / #RemoteComputer) https://anydesk.com/

#AnyDesk 9.5.9 has been released (#RemoteDesktop / #RemoteAccess / #RemoteAssistance / #RemoteSupport / #RemotePC / #RemoteSoftware / #RemoteComputer) https://anydesk.com/

#AnyDesk 9.5.9 has been released (#RemoteDesktop / #RemoteAccess / #RemoteAssistance / #RemoteSupport / #RemotePC / #RemoteSoftware / #RemoteComputer) https://anydesk.com/

I've started gradually replacing #Anydesk and #Teamviewer on all desktops I provide support for with #RustDesk.

https://rustdesk.com/

Sometimes I am deciding, sometimes the owner does, depending on my role with them! Slow but steady path to software freedom and privacy.

This is a #Chromebook showing #RustDesk after replacing #ChromeOS with #Debian #Mate - in Spanish 😎

#GAFAM #GoLinux #photos #EO10Challenges #LGDL #degoogle

I've started gradually replacing #Anydesk and #Teamviewer on all desktops I provide support for with #RustDesk.

https://rustdesk.com/

Sometimes I am deciding, sometimes the owner does, depending on my role with them! Slow but steady path to software freedom and privacy.

This is a #Chromebook showing #RustDesk after replacing #ChromeOS with #Debian #Mate - in Spanish 😎

#GAFAM #GoLinux #photos #EO10Challenges #LGDL #degoogle

I've started gradually replacing #Anydesk and #Teamviewer on all desktops I provide support for with #RustDesk.

https://rustdesk.com/

Sometimes I am deciding, sometimes the owner does, depending on my role with them! Slow but steady path to software freedom and privacy.

This is a #Chromebook showing #RustDesk after replacing #ChromeOS with #Debian #Mate - in Spanish 😎

#GAFAM #GoLinux #photos #EO10Challenges #LGDL #degoogle

I've started gradually replacing #Anydesk and #Teamviewer on all desktops I provide support for with #RustDesk.

https://rustdesk.com/

Sometimes I am deciding, sometimes the owner does, depending on my role with them! Slow but steady path to software freedom and privacy.

This is a #Chromebook showing #RustDesk after replacing #ChromeOS with #Debian #Mate - in Spanish 😎

#GAFAM #GoLinux #photos #EO10Challenges #LGDL #degoogle

I've started gradually replacing #Anydesk and #Teamviewer on all desktops I provide support for with #RustDesk.

https://rustdesk.com/

Sometimes I am deciding, sometimes the owner does, depending on my role with them! Slow but steady path to software freedom and privacy.

This is a #Chromebook showing #RustDesk after replacing #ChromeOS with #Debian #Mate - in Spanish 😎

#GAFAM #GoLinux #photos #EO10Challenges #LGDL #degoogle

Oplichters worden steeds creatiever in hun technieken, en de zogenaamde helpdeskfraude is daar een duidelijk voorbeeld van.

Artikel Cybercrimeinfo: https://www.ccinfo.nl/menu-nieuws-trends/opsporing/gezochte-personen-cybercrime/2555614_de-bilt-helpdesk-fraude

Podcast Spotify: https://open.spotify.com/episode/0DjNU0jW4CsA7hK6wS0qMW?si=a2df5d816d6a4ea3

Podcast Youtube: https://youtu.be/1L_vYm5XB3M

#DeBilt #HelpdeskFraude #Cybercrime #Opsporing #Vishing #Smishing #TechSupportScam #AnyDesk #BankhelpdeskFraude #Cybersecurity #DigitaleVeiligheid #FraudePreventie #Oplichting #Politie #GezochtePersonen #FraudeZaken #Cybercriminelen

Huizen / Almere - Helpdesk fraude

Artikel Cybercrimeinfo: https://www.ccinfo.nl/menu-nieuws-trends/opsporing/gezochte-personen-cybercrime/2542675_huizen-almere-helpdesk-fraude

Podcast Spotify: https://open.spotify.com/show/1tIe2XIhAOfcRB818jsacC?si=W88ogkJ0QHC_HSbLEy7pXg

Podcast Youtube: https://youtu.be/6mJivRWu9UQ

#Huizen #Almere #HelpdeskFraude #Cybercrime #Opsporing #Vishing #Smishing #TechSupportScam #AnyDesk #BankhelpdeskFraude #Cyberdreigingen #Oplichting #DigitalSecurity #CyberAwareness #CyberCriminaliteit #Politie #FraudePreventie #Cybercrimeinfo #Digiweerbaar

Op 9 januari 2025 werd een vrouw in Breda slachtoffer van een geraffineerde bankhelpdeskfraude.

Artikel Cybercrimeinfo: https://www.ccinfo.nl/menu-nieuws-trends/opsporing/gezochte-personen-cybercrime/2528152_breda-helpdesk-fraude

Podcast Youtube: https://youtu.be/Q_D_t_fpQjU

Podcast Spotify: https://open.spotify.com/episode/7rddNI0Cb2UBOJdYeSDmn8?si=f96de99ff2df4293

#Breda #HelpdeskFraude #Cybercrime #Vishing #Smishing #TechSupportScam #AnyDesk #BankHelpdeskFraude #Cybersecurity #VeiligInternet #FraudePreventie #Cybercriminaliteit #Politie #Opsporing #GezochtePersonen #Cybercrimeinfo

RustDesk: удалённый десктоп через свой сервер ретрансляции

RustDesk — приложение для удалённого рабочего стола с открытым исходным кодом, разработанное для самохостинга в качестве альтернативы TeamViewer. Название такое, потому что программа написана на Rust. Работает из коробки, не требует конфигурации. Если установить сервер синхронизации на своём хостинге, то любые машины в интернете могут синхронизироваться и устанавливать соединение через наш сервер для удалённого управления рабочими столами друг друга. Трафик идёт напрямую между ними, но если это невозможно — тоже через сервер, до 3 Мбит/с (1920×1080). Клиентское приложение есть для iOS и Android (на КДПВ), что позволяет со смартфона управлять рабочим столом Windows, Linux и MacOS (и наоборот), а также обмениваться файлами. Есть ещё веб-клиент .

https://habr.com/ru/companies/ruvds/articles/874196/

#ruvds_статьи #RustDesk #самохостинг #P2P_Remote_Desktop #удаленный_рабочий_стол #P2P #TeamViewer #AnyDesk #Remotely #Screego #MeshCentral #Tactical_RMM #Flutter #Sciter #Rust #NAT_Loopback #PM2 #NSSM #файрвол

https://youtu.be/49PWMc0WAHA

Nuevo video de YouTube, software de código abierto para control remoto de equipos

#informatica #vidainformatica #pc #sistemas #internet #tecnologia #gamingsetup #reparacionpc #tecnicos #pcgamer #hardware #pcsetups #windows #GNU #Linux #actualizacion #teamviewer #rustdesk #anydesk #remoto

https://youtu.be/49PWMc0WAHA

Nuevo video de YouTube, software de código abierto para control remoto de equipos

#informatica #vidainformatica #pc #sistemas #internet #tecnologia #gamingsetup #reparacionpc #tecnicos #pcgamer #hardware #pcsetups #windows #GNU #Linux #actualizacion #teamviewer #rustdesk #anydesk #remoto

#DWService et son #DWAgent 😎
Intégré à l' @Emmabuntus depuis un moment 👍
Je vous le recommande 🫵
C'est simple, chez moi, il remplace petit à petit #AnyDesk 😮
▶️ https://www.dwservice.net/fr/home.html

#DWService et son #DWAgent 😎
Intégré à l' @Emmabuntus depuis un moment 👍
Je vous le recommande 🫵
C'est simple, chez moi, il remplace petit à petit #AnyDesk 😮
▶️ https://www.dwservice.net/fr/home.html

Un nuovo malware denominato #LOBSHOT viene distribuito attraverso #GoogleAds spacciato per il famoso software di gestione remota #AnyDesk. https://andreafortuna.org/2023/05/02/new-remote-access-trojan-lobshot-spotted-in-google-ads-impersonating-anydesk/?utm_source=dlvr.it&utm_medium=mastodon

Un nuovo malware denominato #LOBSHOT viene distribuito attraverso #GoogleAds spacciato per il famoso software di gestione remota #AnyDesk. https://andreafortuna.org/2023/05/02/new-remote-access-trojan-lobshot-spotted-in-google-ads-impersonating-anydesk/?utm_source=dlvr.it&utm_medium=mastodon

📬 Lobshot Malware erlaubt versteckten Fernzugriff auf Windows
#Krypto #Malware #AnyDesk #DLL #GoogleAds #hVNC #KryptoWallets #Lobshot #VNC https://tarnkappe.info/artikel/krypto/lobshot-malware-erlaubt-versteckten-fernzugriff-auf-windows-273916.html

📬 Lobshot Malware erlaubt versteckten Fernzugriff auf Windows
#Krypto #Malware #AnyDesk #DLL #GoogleAds #hVNC #KryptoWallets #Lobshot #VNC https://tarnkappe.info/artikel/krypto/lobshot-malware-erlaubt-versteckten-fernzugriff-auf-windows-273916.html

📬 Lobshot Malware erlaubt versteckten Fernzugriff auf Windows
#Krypto #Malware #AnyDesk #DLL #GoogleAds #hVNC #KryptoWallets #Lobshot #VNC https://tarnkappe.info/artikel/krypto/lobshot-malware-erlaubt-versteckten-fernzugriff-auf-windows-273916.html

📬 Lobshot Malware erlaubt versteckten Fernzugriff auf Windows
#Krypto #Malware #AnyDesk #DLL #GoogleAds #hVNC #KryptoWallets #Lobshot #VNC https://tarnkappe.info/artikel/krypto/lobshot-malware-erlaubt-versteckten-fernzugriff-auf-windows-273916.html

📬 Lobshot Malware erlaubt versteckten Fernzugriff auf Windows
#Krypto #Malware #AnyDesk #DLL #GoogleAds #hVNC #KryptoWallets #Lobshot #VNC https://tarnkappe.info/artikel/krypto/lobshot-malware-erlaubt-versteckten-fernzugriff-auf-windows-273916.html

The #SophosMDR team also discovered cases where threat actors targeting #PaperCut were abusing the bitsadmin.exe Windows application to download payloads. #BITSAdmin is commonly abused by active adversaries as a "living off the land binary" or #LOLbin, handy for accomplishing the task of downloading payloads.

The tools exploited in the attacks have included what we refer to as “dual-use agents,” used both legitimately by IT staff and maliciously by attackers. At the time of writing, Sophos has observed the abuse of #AnyDesk, #Atera, #Synchro, #TightVNC, #NetSupport, and #DWAgent remote management tools across multiple campaigns.

4/6

The #SophosMDR team also discovered cases where threat actors targeting #PaperCut were abusing the bitsadmin.exe Windows application to download payloads. #BITSAdmin is commonly abused by active adversaries as a "living off the land binary" or #LOLbin, handy for accomplishing the task of downloading payloads.

The tools exploited in the attacks have included what we refer to as “dual-use agents,” used both legitimately by IT staff and maliciously by attackers. At the time of writing, Sophos has observed the abuse of #AnyDesk, #Atera, #Synchro, #TightVNC, #NetSupport, and #DWAgent remote management tools across multiple campaigns.

4/6

📬 AvosLocker: Nach irrtümlichem Polizeiangriff sorgt Ransomware-Bande für Gratis-Entschlüsselung #Hacking #Malware #AnyDesk #AvosLocker #pancak3 #Polzeiangriff #Ransomware #REvil #SophosLabs https://tarnkappe.info/avoslocker-nach-irrtuemlichen-polzeiangriff-sorgt-ransomware-bande-fuer-gratis-entschluesselung/