Mad Liberator extortion crew emerges on the cyber-crook scene

Sophos X-Ops identified a new extortion group, Mad Liberator, which uses social engineering and the remote-access tool AnyDesk to obtain interactive access to victims' machines, deploy a fake "Microsoft Windows Update" binary (SHA256 provided), exfiltrate files via AnyDesk and mapped shares, and threaten disclosure via a leak site — employing double-extortion tactics though widespread file encryption was not confirmed in the observed cases.