


Chocolatey is trusted by businesses to manage software deployments. Once you accept the connection, you should land on the remote system desktop. On Fedora 30/29/CentOS 7, you should accept the session request for you to access the remote desktop. Chocolatey integrates w/SCCM, Puppet, Chef, etc. To connect to Fedora 30/29/CentOS 7 desktop using AnyDesk, just launch the AnyDesk on your system and use the 6 digit address for the remote AnyDesk. You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity and hacking news updates.- for RHEL linux add the repository: cat > /etc//AnyDesk-RHEL.repo /etc//AnyDesk-CentOS.repo /etc//AnyDesk-Fedora.repo AnyDesk-OpenSUSE. Chocolatey is software management automation for Windows that wraps installers, executables, zips, and scripts into compiled packages.

That’s why the analysts affirmed that AnyDesk is quite a common target for the threat actors, so, users must stay aware of these attacks. However, the experts stated that this method will not help the threat actors to get a shell on the targeted attack that they want.īut the usage of malicious Google ads is a quite effective method to get a strong way to dress mass deployment of shells. The intermediary websites used by the threat actors are mentioned below:-Īfter the investigation, the security researchers have come to know that the threat actors are spending $1.75 per click. However, this malicious campaign is using intermediary sites, which can later be redirected to a social engineering page at a specific URL that is com/AnydeskSetup.exe, and all the pages that are hosted in this URL is a clone of the legal AnyDesk website. The people who are searching AnyDesk on Google were being served by the malicious Google ads which have been placed by the threat actors, and this is happening from April 21, 2021. When these files were being executed, the experts noticed that they are downloading a PowerShell implant, that is continuously exfiltrating all the data and information from the affected system. Malvertisers developed the Legit AnyDesk appĪfter going through this malware, the experts came to know that the malicious campaign is dispatching all the assembled AnyDeskSetup.exe files which took off on April 21.
