AnyDesk
- Last IoC activity
- 2026-07-22 00:35:10
- Profile updated
- 2026-07-07 15:39:55
Context
AnyDesk is a remote desktop program that you can run portably or install like a regular program.
Detection coverage
- 3 YARA rules
Used by threat actors
- Black Basta Operator Social Engineering Campaign (campaign)
- Karakurt (threat-actor)
Detection rules
- SIGNATURE_BASE_SUSP_Anydesk_Compromised_Certificate_Jan24_1 (yara-rule)
- SIGNATURE_BASE_SUSP_Anydesk_Compromised_Certificate_Jan24_2 (yara-rule)
- SIGNATURE_BASE_SUSP_Anydesk_Compromised_Certificate_Jan24_3 (yara-rule)
Reports & references
- anydesk.com — Remote Desktop (report)