Readit Newsmatbilodeau commented on Canada to ban the Flipper Zero to stop surge in car thefts bleepingcomputer.com/news... · Posted by u/matbilodeau
Continuation of
https://news.ycombinator.com/item?id=39308731
If (huge if!) those screen shots are legit, then Anydesk was storing passwords in cleartext or equivalent; many of them are far too random to be bruteforced so quickly.
The last one, where both the domain name and password start with QR, makes me think the screenshots might actually be legit.
Seen on Breach Forums onion site as well ...
>AnyDesk did not respond to questions asking if any customer data was accessed, though the company said in its statement that there is “no evidence that any end-user systems have been affected.”
In my experience, this answer is equivalent to "Yes, customer data was accessed".
If it wasn't, they'd say something like "We have no reason to believe customer data was accessed", instead of trying to shift the focus to whether or not end-user systems were caught up in the blast radius.
there are accounts for sale
https://securityonline.info/anydesk-breach-2024-dark-web-sal...
matbilodeau commented on AnyDesk Incident Response 2-2-2024 anydesk.com/en/public-sta... · Posted by u/matbilodeau
The ramifications of this breach are profound. Cybercriminals who gained
access to the AnyDesk portal could glean valuable information about
customers, including license keys, active connections, session
durations, contact information, email addresses, and the number of
managed remote access hosts, all with their online/offline status and
IDs. Such details open up a plethora of malicious possibilities.
In light of this breach, AnyDesk customers must take proactive steps to protect their accounts and data. Password changes alone are insufficient. AnyDesk offers a whitelist feature, enabling users to specify who can connect to their devices, adding an extra layer of security. Multi-factor authentication (MFA) is strongly recommended to enhance account protection. Organizations should also monitor for any unexpected password and MFA changes, suspicious sessions, and emails referencing AnyDesk accounts from unknown sources.
https://securityonline.info/anydesk-breach-2024-dark-web-sal...