logo

Thousands of Stolen AnyDesk Login Credentials Sold on Dark Web

ID: dc5dec6a-0040-5bd5-ab74-7e9b6e83996a

STIX ID: report--dc5dec6a-0040-5bd5-ab74-7e9b6e83996a

Feed Name: HackRead

Threat Score
75/100

Date Published: 2024-02-04

Date Updated: 2026-04-22

Author: Waqas

...
...

Researchers disclosed that multiple threat actors are selling thousands of compromised AnyDesk credentials (reported between ~18k and >30k accounts) on clear- and dark-web forums following an AnyDesk security disclosure; the accounts appear harvested by infostealer malware and are being marketed for cryptocurrency with escrow, with screenshots/timestamps showing recent successful logins and posing significant risk of account takeover, data theft, fraud, and potential ransomware or operational disruption.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.