AnyDesk
- Related IoCs
- 1 (1 malicious)
- Last IoC activity
- 2026-09-11 18:14:43
- Profile updated
- 2026-07-07 15:39:55
Context
AnyDesk is a remote desktop program that you can run portably or install like a regular program.
Detection coverage
- 3 YARA rules
Used by threat actors
- Karakurt (threat-actor)
- Black Basta Operator Social Engineering Campaign (campaign)
Detection rules
- SIGNATURE_BASE_SUSP_Anydesk_Compromised_Certificate_Jan24_1 (yara-rule)
- SIGNATURE_BASE_SUSP_Anydesk_Compromised_Certificate_Jan24_2 (yara-rule)
- SIGNATURE_BASE_SUSP_Anydesk_Compromised_Certificate_Jan24_3 (yara-rule)
Reports & references
- anydesk.com — Remote Desktop (report)