Mad Liberator extortion crew emerges on the cyber-crook scene

A new extortion gang called Mad Liberator uses social engineering and the remote-access tool Anydesk to steal organizations' data and then demand a ransom payment, according to Sophos X-Ops. The incident response team observed the cyber crime crew first emerged in mid-July. And while Sophos X-Ops calls it a ransomware group, …

[sitta_europea]

"Anydesk allows remote access by assigning a unique 10-digit address to every device upon which it is installed."

Am I the only one who thinks that's not a lot of digits, even if they're hexadecimal digits?

[Ian Johnston]

Ten hexadecimal digits would be two more than needed for the entire IPv4 addresses space. Anyway, I can't help feeling that security which relies on someone not knowing your address (or, similarly, your sort code and account number) isn't much good. "They don't know where I live" isn't a patch on a door lock for keeping burglars out.

[PeterM42]

Only Accept.....

.....when you know WHO is trying to access.

[Ian Johnston]

Re: Only Accept.....

Conversely, "Accept when you know WHO is trying to access" is exactly how and why social engineering attacks work.