Se let's see what Anydesk offers: -2FA - you can set a password on your server (i believe you have to disable the 'let clients store credentials on the server' in the settings and that should force the PW use for every session) -you can set an access list - means you can only connect from certain anydesk IDs This covers my security needs. AnyDesk provides Two-Factor Authentication for the MyAnyDesk account, as well as for the AnyDesk client during a session request. Use this method with an authentication app that utilizes 'time-based one-time passwords' (TOTP).
See also Unattended Access
AnyDesk provides Two-Factor Authentication for the MyAnyDesk account, as well as for the AnyDesk client during a session request.
Use this method with an authentication app that utilizes 'time-based one-time passwords'(TOTP).
Client
Two-Factor authentication delivers ideal security for access of your devices.
AnyDesk requires a TOTP-Password that is set up by an authenticator.
This feature is meant to add a security layer to the password and not to replace it.
Solely the owner of the authenticator may initiate the session.
Settings & Setup
'Enable Two-Factor Authentication' in the security settings. Scan the QR-Code or paste the key into your authenticator.
Use the authenticator of your choice.
Establishing a session
The 6-digit authorization key from the authenticator is requested directly or after the unattended access password is either typed in or submitted automatically.
Note:Make sure that the system time on the device with the authenticator app and the device with 2FA are in sync.
Otherwise the authenticator code might not be accepted, the 'Enable authenticator' button stays grayed out.
my.anydesk.com
Two-Factor Authentication for my.anydesk.com.
Recommended authenticator apps
The following apps are tested and recommended:
- Google Authenticator
- Microsoft Authenticator
- FreeOTP
Print the recovery key to restore your account when needed.
DO NOT PROCEED WITHOUT SAVING OR PRINTING THE RECOVERY KEY.
The recovery key cannot be retrieved or reset.
In case you lose the ability to login to your account using 2FA and don't have access to the recovery key,
please contact AnyDesk Technical Support
Scammers mixed together a malicious cocktail of social engineering, SIM-swapping, and remote desktop software to empty the bank accounts of at least three victims.
In total, victims lost more than $350,000. They were likely swindled by the same individuals since the modus operandi and some details were the same in all three cases.
Remote access to sensitive info
The scams happened over the summer in Budapest and started with the ruse of a well-located apartment offered for sale below the market value.
Anydesk 2fa Free
Enticed by the offer, the victims showed their interest and responded to the ad, learning that the lower price was because the owner, who was living abroad, needed money urgently.
A “relative” of the owner acted as an intermediary for the transaction and promised potential victims more pictures of the property than shown in the original online ad, along with a video.
In two cases, the scammer convinced the victims to install AnyDesk remote desktop application to transfer the pictures and videos, Hungarian publication 24 reports.
Since AnyDesk is legitimate software, and the victims downloaded it directly from the developer’s website, there was no reason to suspect foul play.
The fraudster maintained access to the victim computer even after transferring the files and could search for sensitive info (documents, passwords, personal details) that would help them further in their scheme.
Anydesk 2fa
The goal was to log into the victim’s bank account and steal available funds; but with two-factor authentication (2FA) turned on, they also needed access to incoming messages on the mobile phone.
Connection lost
So they ran a SIM-swap scam, essentially tricking mobile service provider employees into activating a new SIM card with the victim’s phone number. At this point, the original SIM card becomes inactive and loses connection to the network.
At the same time, the fraudster’s new SIM gets all the victim’s calls and messages, including the 2FA code for logging into the bank account.
In at least one instance, the scammers converted the money to cryptocurrency, to make it more difficult to track.
With access to the victim's SMS and with online banking credentials in hand, the scammer could access the victim's bank account and drain it as if they were the legitimate owner.
Another way would be to log into the banking account using the remote connection to the victim's computer, provided it's turned on.
Anydesk 2fa Download
The SIM-swap scam has been rampant over the past years, causing victims across the world and millions of US dollars in losses. If fraudsters can’t bypass the security implemented by the mobile service provider, they often pay employees to replace the cards.
With so many services, banks included, still checking the authenticity of a login through SMS verification, it is easy to see why SIM-swapping wreaked havoc lately.
Anydesk 2 Factor
Related Articles: