Google Ad for Fake Anydesk Campaign Feb 2023

Strike ID:
P23-2ijv1
CVSS:
4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
False Positive:
f
Variants:
1
Year:
2023

Description

This strike simulates a malicious Google Ad that advertises an Anydesk download. It tries to trick the user into clicking a link to download what appears to be the Anydesk software, but instead redirects to a site hosting a malicious MSI download of TA505 malware.

References