The same method of theft is widely used internationally on either mobile phones or computers: a phone call convinces a person to allow connection to their device, typically from a caller claiming to be a service provider to "solve problems with the computer/phone", warning that Internet service will otherwise be disconnected, or from a caller claiming to be a financial institution because "there have been suspicious withdrawal attempts from your account". A similar scam took place in 2020 according to Kashmir Cyber police. After permissions are obtained and if no other security measures are in place, the scammers usually transfer money using the Indian Unified Payment Interface. Then, the scammers convince the victim to provide the nine-digit access code and to grant certain permissions. The general scam procedure is as follows: fraudsters get victims to download AnyDesk from the Google Play Store on their mobile phone, usually by mimicking the customer service of legitimate companies. In February 2019, Reserve Bank of India warned of an emerging digital banking fraud, explicitly mentioning AnyDesk as the attack channel. This provides the host user with full access to the guest computer over the Internet, and, like all remote desktop applications, is a severe security risk if connected to an untrusted host.
Abuses ĪnyDesk can be optionally installed on computers and smartphones with full administrative permissions, if the user chooses to do so. Additionally, whitelisting of incoming connections is possible. When a direct network connection can be established, the session is endpoint encrypted and its data is not routed through AnyDesk servers.
Every connection between AnyDesk-Clients is secured with AES-256.
In May 2018, AnyDesk secured 6.5 million Euros of funding in a Series A round led by EQT Ventures. AnyDesk Software GmbH was founded in 2014 in Stuttgart, Germany and has gone worldwide, with subsidiaries in the US and China.
0 kommentar(er)
