Bleeping Computer has written an article covering research from a SEKOIA analyst regarding a Vidar malware campaign involving 1,300 domains impersonating the AnyDesk brand. Victims are likely directed to these domains through a phishing campaign or search engine results and are then redirected to a DropBox folder to download the Vidar malware disguised as an AnyDesk installer. Vidar malware capabilities include copying browser histories, account credentials, passwords, cryptocurrency wallets, and banking data to send to its controller for further malicious use. Given the popularity of AnyDesk in providing remote system access/administration and individuals’ propensity to click on top search results for similar remote tools, members are encouraged to review this post and share accordingly. Read more at Bleeping Computer here.
H2Oex: In Person 1 day event/exercise. Thurs Dec 5th. Washington DC. Join us!