AnyDesk hacked

[madires]

In case you're using AnyDesk make sure to update to the latest version (Windows client v8.0.8, signed with a new certificate). You can find a quite comprehensive report at https://borncity.com/win/2024/02/03/anydesk-confirmed-they-have-been-hacked-in-january-2024-production-systems-affected/ (several parts).

[kripton2035]

seems like version 8 is for windows. what about the macos or linux v7 ?
thanks for the info.

[madires]

The latest version for macOS is v7.3.0 and for linux v6.3.0.

[madires]

Update:
Custom clients (customized version of the AnyDesk client) are still signed with the old cert when generated by the website, but they should be fine. In a few weeks they'll be signed with the new cert.

[madires]

Update:
A third party asked the CA (DigiCert) to revoke the old cert and the CA agreed. Tomorrow the old cert becomes invalid. At the moment no custom clients can be generated. This leaves support teams using a custom client in limbo, as the custom client with the old cert should be rejected soon by the OS when the CRL (certificate revokation list) is updated.