The Nadella renaissance

Nadella, a Microsoft veteran with 22 years at the company, was chosen as CEO because of his intimate understanding of the company and his vision for change. One of his earliest moves was a cultural overhaul, breaking away from the cutthroat, competitive “know-it-all” culture that characterised the company during the Steve Ballmer and Bill Gates eras. Instead, Nadella introduced a culture focused on learning, collaboration, and empathy, which emphasised the value of shared knowledge and growth.

Nadella made it clear that his goal was not simply to continue the old ways of working but to fundamentally transform how the company approached its business and culture. This meant redefining success, not by market dominance, but by the depth and breadth of partnerships, creativity, and a willingness to adapt. He famously shifted Azure, the company’s cloud platform, to embrace open-source software—a significant departure from Microsoft’s historically proprietary approach.

He also brought a fresh empathetic approach, emphasising transparency and openness.

“Come with your brain. Be sharp, and let’s talk about it,” he encouraged employees, transforming Microsoft’s internal atmosphere into one that promoted ideation without fear of mistakes.

Under his leadership, the company began celebrating a “growth mindset,” where learning from failure was prioritised over simply proving oneself. This transformation laid the foundation for Microsoft’s reemergence as an industry leader.

Nadella’s cultural transformation at Microsoft focused not only on leadership style but also on diversity and inclusivity, which laid the groundwork for innovation. He introduced various initiatives that aimed to break down silos and promote a more open and collaborative work environment.

For instance, he focused on increasing diversity in the workforce, seeing diverse perspectives as key to fostering a more creative and innovative company. Nadella’s efforts towards inclusivity also meant that employees felt more empowered to contribute, which fostered a sense of collective ownership and pride in Microsoft’s products and services.

Nadella also implemented a major internal shift in how success was measured at Microsoft. Rather than traditional metrics like market share or profitability, the company began focusing on customer satisfaction and user engagement. This new focus influenced every department, from engineering to sales. By aligning success metrics with customer happiness, Nadella ensured that the company stayed true to the goal of creating value for its users, not just profits.

Crucial strategic acquisitions

Nadella understood the value of adding new assets to Microsoft’s ecosystem—but not by assimilating them into its traditional architecture. He acquired Minecraft in 2014, noting that the game provided a unique opportunity to build relationships with younger generations who may not have had a strong connection to Microsoft. Instead of bringing Minecraft into the Windows family, he decided to keep it largely independent, allowing it to continue to thrive and innovate.

Minecraft was more than just a game; it was a community and a platform for creativity that connected with younger audiences, educators, and developers. Nadella saw the potential of a generation growing up with Minecraft, not just as a game but as a tool that taught kids the basics of coding, architecture, and teamwork.

By promoting the Minecraft community without altering its DNA, Nadella ensured that the franchise would remain popular while also showcasing Microsoft’s ability to nurture different types of digital experiences.

This approach was also evident when Microsoft purchased LinkedIn in 2016 for $26 billion. LinkedIn provided a unique professional network that complemented Microsoft’s product offerings, particularly those aimed at enterprise customers.

Nadella’s emphasis on “reverse acquisitions” encouraged these acquired brands to utilise Microsoft’s vast resources without becoming stifled by its bureaucracy. In LinkedIn’s case, this meant leveraging Microsoft’s cloud services while retaining LinkedIn’s independent operations. It was a different approach to integration—one that prioritised innovation over control.

LinkedIn’s acquisition was more than just a strategic move to expand Microsoft’s enterprise offerings; it provided deeper insights into how professionals were using technology. Microsoft integrated LinkedIn data with its Dynamics 365 CRM, making it possible for businesses to better understand their customers.

This synergy between LinkedIn and Microsoft’s cloud services became a powerful tool, reinforcing Microsoft’s status as a critical player in enterprise productivity and customer relationship management.

In 2018, the acquisition of GitHub for $7.5 billion brought the open-source community into Microsoft’s sphere of influence. This acquisition was particularly symbolic given Microsoft’s historically antagonistic stance towards open source. By allowing GitHub to function independently, Nadella fostered positive relationships with the global developer community—a group Microsoft had previously alienated. It wasn’t just about the technology; it was about winning back the hearts and minds of the developers who drive the tech ecosystem.

These acquisitions were crucial in transforming Microsoft’s image from a lumbering tech giant to a company willing to embrace and nurture community-driven platforms. They were not just business deals; they were commitments to engage with diverse audiences in new and respectful ways.

Nadella’s strategy was to provide support without imposing Microsoft’s bureaucracy, thereby ensuring that acquired companies retained their unique culture and strengths, which allowed them to thrive within Microsoft’s ecosystem.

The game-changing OpenAI partnership

The 2019 partnership with OpenAI, led by Sam Altman, involved a bold $1 billion investment from Microsoft in artificial intelligence. While many in the industry doubted AI’s immediate potential, Nadella saw an opportunity for growth that extended beyond the immediate bottom line. He envisioned AI as a fundamental force that would redefine productivity and creativity.

OpenAI’s work on GPT-3 and GPT-4 quickly bore fruit, with early demos proving that the technology could change the software landscape.

Kevin Scott, Microsoft’s CTO, recognised that AI’s coding abilities could expedite and automate programming tasks—a vision that eventually materialised as GitHub Copilot. The Copilot tool allowed developers to leverage AI for code suggestions, dramatically improving coding speed and accuracy, which hinted at how AI could augment human creativity rather than replace it.

The OpenAI partnership was more than just a financial investment; it represented a philosophical alignment. Both organisations shared a belief that AI, if developed responsibly, could transform human productivity and create new growth opportunities.

Microsoft’s $1 billion investment was followed by additional funding, and the relationship evolved into a strategic partnership where Microsoft provided the infrastructure for OpenAI’s ambitious models. This gave Microsoft early access to groundbreaking AI technologies and positioned Azure as the go-to cloud platform for AI research and applications.

Microsoft’s partnership with OpenAI gave it a significant edge, leading to an exclusive agreement allowing Microsoft to incorporate OpenAI’s language models into its suite of products.

This exclusive partnership also helped Microsoft integrate AI into Azure, making it a preferred platform for developers using AI models. This move signalled Microsoft’s shift from being a builder of AI tools to a platform enabler for global AI innovation. Nadella aimed to position Microsoft at the centre of the next big platform—the AI Copilot.

AI integration across products

Scott declared 2023 “The Era of the AI Copilot.” Microsoft launched AI-driven features across its offerings, from Microsoft 365 tools to its Windows operating system. The flagship was the integration of GPT-4 into Bing, making Microsoft’s search engine a viable contender against Google for the first time in over a decade. Nadella saw this as a moment of reckoning: after years of being a runner-up in search, Microsoft could finally force Google to respond.

Despite some initial embarrassments—like Bing’s chatbot confessing love for a reporter during its early rollout—Microsoft pushed forward, refining the technology. The Bing Copilot wasn’t just about search—it was a demonstration of the integration of AI into everyday tasks.

It could summarise information, provide direct answers, and even assist in creative writing. This “Copilot” branding represented the next wave of software development: tools that worked alongside users, improving efficiency and productivity.

The broader goal was to introduce Copilot across all major Microsoft products. Office tools like Word, Excel, and PowerPoint were enhanced with AI capabilities that could draft emails, summarise data, and create slide decks with minimal input from the user. This was a significant redefinition of productivity software, where the user wasn’t just interacting with static tools but collaborating with an intelligent system.

Copilot in Microsoft Teams revolutionised how virtual collaboration took place. Users could rely on AI to transcribe meetings, summarise discussions, and even suggest action items. This changed the dynamics of remote work, making virtual interactions more efficient and actionable. By making AI an integral part of communication, Microsoft helped its customers save time and focus on strategic decision-making rather than administrative tasks.

By the end of 2023, Copilot had also made its way into Microsoft Teams, Azure, and the Windows operating system itself, bringing a new level of personal assistance to digital work environments.

Nadella’s vision of AI was not as a replacement but as an augmentation—a Copilot to help users navigate through the complexity of their digital tasks and make sense of vast amounts of information.

The integration of Copilot into Azure also enabled developers to create smarter applications more easily. Azure AI services became more user-friendly, offering pre-built models and customisation options that allowed businesses of all sizes to incorporate AI capabilities without needing extensive expertise.

This democratisation of AI meant that even small startups could harness the power of machine learning, thus expanding Azure’s user base and solidifying Microsoft’s position as a leader in cloud computing and AI services.

Antitrust and competitive tactics: Old habits die hard

The “Copilot” success wasn’t without controversy. Microsoft’s expansion plans, including its integration of Teams into Office 365, faced scrutiny from regulatory bodies, particularly in the EU. Slack’s founders argued that Microsoft’s bundling strategy stifled competition by making Teams a default product for millions of Office users. The European Commission launched an investigation, eventually forcing Microsoft to unbundle Teams from its Office products.

Additionally, Microsoft’s acquisition of Activision Blizzard for $69 billion brought scrutiny from the US Federal Trade Commission (FTC). Critics argued that Microsoft’s moves risked monopolising sectors of the gaming industry, similar to its earlier battles over Internet Explorer’s dominance. Nadella maintains that these moves are part of Microsoft’s strategy to extend into mobile gaming and grow Xbox’s reach, rather than squelch competition.

The broader debate over Microsoft’s practices touched on the issue of market influence and whether the company’s massive acquisitions were about strengthening innovation or eliminating competition.

This scrutiny highlighted the tightrope that Nadella had to walk—balancing aggressive growth with the perception of fair competition. It was a reminder that even as Microsoft embraced new ideals, its size and influence would always invite careful examination from regulators.

Nadella’s defence of Microsoft’s strategies also included emphasising how acquisitions like Activision would benefit consumers by accelerating innovation. He argued that bringing Activision’s capabilities into Microsoft’s ecosystem would create new opportunities for cross-platform experiences, thereby benefiting gamers.

Nadella made a point of outlining how increased investment in game studios could lead to more diverse and inclusive gaming experiences, which in turn could open up new markets for Microsoft.

Turning adversaries into allies

One of Nadella’s most effective shifts was embracing open-source technologies, a stark contrast from Microsoft’s earlier era, which saw Linux as a threat. Nadella and Scott Guthrie, who led the Azure cloud services division, understood that for Azure to grow, it needed to support Linux, which had become the operating system of choice for startups and developers. Nadella made the decision swiftly, ignoring years of anti-Linux sentiment at Microsoft.

This was emblematic of the change Nadella brought: instead of protecting old revenue streams at the cost of stifling innovation, he shifted Microsoft’s vision towards embracing the wider tech ecosystem. By integrating Linux into Azure and acquiring GitHub, Microsoft built credibility with the very developers it had once alienated.

The impact of this change went beyond public relations. By embracing open source, Microsoft found itself contributing to projects that it once saw as a threat. This change allowed Azure to become the backbone for many of the world’s most innovative startups and enterprises. The company also encouraged collaboration within the developer community, which was vital for the adoption of new technologies, especially AI.

Nadella’s commitment to open source was also about community building. He emphasised that Microsoft could only grow if it helped grow the broader tech community. By launching initiatives like the Open-Source Programmes Office and contributing to significant open-source projects, Microsoft demonstrated that it was serious about being an active member of the open-source ecosystem. This approach not only helped Microsoft improve its technology but also changed perceptions of the company from a monopolistic giant to a supportive partner.

Microsoft as a platform for AI innovation

With Mustafa Suleyman, DeepMind co-founder, joining Microsoft AI in 2024, the company’s commitment to dominating the AI space became even more apparent. As Suleyman puts it, “Microsoft is a platform of platforms,” signalling that the company’s vision is not to monopolise AI but rather to facilitate a marketplace where innovation can thrive.

Yet, despite these lofty goals, the nature of Microsoft’s relationship with OpenAI remains complex, and the question of whether Microsoft will eventually launch its own AI language models remains open.

Suleyman’s arrival marked a new era for Microsoft’s AI ambitions. He brought a wealth of experience and a different perspective on how AI could evolve responsibly. Microsoft made it clear that it wanted to be the primary platform where developers could build, train, and deploy AI models. By making Azure the default home for AI development, Microsoft aimed to be at the forefront of all major AI advancements.

As Nadella drives Microsoft towards the AI future, he appears intent on balancing two imperatives: enabling an open ecosystem for developers while maintaining a competitive edge.

The emphasis on Copilot and integrated AI tools across its product lines suggests that Nadella sees Microsoft’s future less as a builder of standalone software and more as a foundational platform that users leverage to achieve more—guided by AI, of course.

In addition, Microsoft’s focus on partnerships with AI research labs and its continued investments in quantum computing demonstrate its vision of the future. Microsoft wants to ensure that it is a leader not just in current AI technology but also in the next generation of disruptive tech. This commitment to ongoing research and development positions the company as a thought leader in multiple facets of technological innovation.

Microsoft’s pursuit of quantum computing is an example of how it aims to stay ahead of the curve. Quantum technology holds the promise of solving computational problems that are currently impossible for classical computers, and Microsoft’s investments in this area highlight its ambition to not only remain relevant but to be at the cutting edge of future technological revolutions. By combining AI, quantum computing, and cloud infrastructure, Microsoft is aiming to create a technology stack that can solve some of the world’s most pressing challenges.

The balancing act

As Microsoft enters its 50th year, Nadella’s leadership has restored the company’s reputation and fuelled its most profitable years to date. From $1 billion investments in small AI labs to $69 billion gaming acquisitions, Nadella’s strategies have consistently placed Microsoft at the intersection of innovation and opportunity.

However, familiar criticisms remain. Antitrust investigations, security vulnerabilities, and competition complaints echo the old Microsoft—a corporate giant that once wielded its influence with little restraint. Nadella’s success is tempered by the realisation that the very size and influence Microsoft has regained also make it a target for regulatory scrutiny.

The story of Microsoft at 50 is one of reinvention, calculated risks, and a renewed focus on innovation. Nadella turned Microsoft from a fading tech giant into a dynamic leader in AI—but the challenge now lies in maintaining that balance: encouraging innovation, learning from failures, and avoiding the pitfalls of past hubris.

As the company aims to be the platform that shapes the next generation of technology, the question isn’t whether Microsoft is still relevant. It is whether it can stay at the forefront, ethically and responsibly, in the next wave of technological change.

The company’s ambition is clear: to be the essential platform for developers, businesses, and individuals navigating an increasingly AI-driven world. Microsoft’s trajectory will be determined not just by its technological prowess but also by its ability to adapt and learn—qualities Nadella has strived to embed into the company culture. As Microsoft looks ahead, the hope is that it can continue to innovate without repeating the mistakes of its past, maintaining its relevance by being a force for positive technological change.

By embracing change, prioritising empathy, and nurturing a culture of growth, Nadella has led Microsoft back to the forefront of technology. The lessons from this journey are profound: with the right mindset, even a company as large and seemingly set in its ways as Microsoft can transform itself. The future remains challenging, but if Nadella’s past successes are any indicator, Microsoft is well-positioned to lead the way into the next era of technological innovation.

The post Microsoft@50: Transforming tech with growth mindset appeared first on International Finance.

What is SSH access used for?

SSH access is used for many different things, such as transferring files, running commands, and remotely logging into servers. The SSH clients PuTTY (Windows), Terminal (Mac), and Linux Shell are some of the most well-known ones. SSH is a strong tool that may be applied to many different jobs. Experts say it is important to remember that SSH is not meant to be used as a general-purpose file transfer protocol, instead users can use an application like SFTP to move files between two computers.

Accessing SSH

One must have a user account on a web hosting server in order to gain SSH access. One who is accessing can create an SSH key pair once they have a user account. The private key will remain on the local machine while the public key is added to the authorized keys file on the server. One can connect to the server with an SSH client when the key pair has been generated. There are other SSH clients available, but for Windows users experts suggest PuTTY and for Mac users suggest Terminal. There should already have a Terminal programme installed if one is using Linux. Once launched, choose the SSH client, and enter the hostname or IP address of the server into the connection settings.

After choosing ‘SSH’ as the connection type enters login details. After providing all the required details, click “Connect” to establish a connection to the server. If the details are correct a user will get a password notification request. After entering the password the server’s command prompt will appear. From this point, the user can issue any commands that would typically be issued on the server. Enter ‘exit’ at the command prompt to break the connection to the server. PuTTY is also available for Linux (through Ubuntu Software Centre) and Mac (via Homebrew).

How does SSH encryption work?

SSH encryption is a process that uses mathematical algorithms to encode data. The data can then be decoded by the sender and receiver using a secret key. This procedure aids in ensuring that the data is kept private and unaltered while in transit. Additionally, SSH offers authentication, assisting in limiting unauthorized access to systems and data. Public-key encryption and symmetric key encryption are the two primary types of SSH encryption. One key is used for encoding and the other for decoding in public key encryption.

The sender and receiver share the keys, which are typically generated by a third-party provider. The same key is utilized for both encoding and decoding in symmetric key encryption. This means that before any data can be encrypted or decrypted, the sender must first send the key to the recipient. While both symmetric key and public key encryption are safe, symmetric key encryption is frequently used for high-speed data transfers because it is frequently faster.

Is SSH available on mobile platforms?

On all of the major mobile operating systems, including iOS and Android, Secure Shell is accessible. It offers a safe way to access the command-line interface (CLI) on mobile devices, enabling the user to execute commands and send files without having to worry about someone listening in on the conversation. Users need to install a client app, such as Terminus or Connectbot, on mobile devices to use SSH. Once the app is installed, the User can use the connection screen to enter the server’s web address or IP address to establish an SSH connection. Additionally, users must enter their username and password (if using password authentication).

Is SSH completely free?

Although SSH is not entirely free, it is free for many purposes. Users have to pay for the server when using SSH, for instance, to access a remote server. However, there is no fee if the user wants to connect via SSH to a friend’s computer. SSH is typically free for personal use, but some business applications charge a fee.

Do all browsers support SSH?

Experts say it is less straightforward with some browsers. For example, Google Chrome simply utilizes the OS’s default settings, so if a user machine connects using SSH, Chrome will do the same. Chrome can also be started from the command line with the ‘—proxy-server’ parameter, but this is undoubtedly more work than simply using another browser. Experts suggest Mozilla Firefox or Microsoft Edge browsers which support SSH.

How does SSH enhance security?

SSH encrypts all communication between the client and server, making it far more challenging for attackers to eavesdrop on conversations. This is crucial when a user is sending sensitive information like passwords or financial information. SSH also has authentication features, so only people with permission can access the server. In order to do this pairs of public and private keys are used. Both the client and the server have copies of the public and private keys. The server uses the client’s public key to confirm that it has the private key when the client tries to connect to the server. The SSH gives access to the user only if things are in order.

Are open-source SSH clients less secure?

SSH clients come in a few different types, but the open-source versions are the most widely used. In general, open-source software is thought to be safer than closed-source software. Although choosing an open-source or closed-source SSH client is entirely up to the user, experts advise using open-source clients for security-related reasons.

What sort of data can be secured using SSH?

SSH is an excellent tool for protecting data in transit, as it can be used to encrypt traffic between two computers or secure data being sent over the internet. In order to securely connect to remote servers, SSH is frequently used to build tunnels between two computers. Additionally, it can be used to backup databases and files securely and to secure data transmission.

How to use SSH access

SSH access is a great way to manage a web server remotely. When using SSH, there are a few considerations. It is important to make sure that the user is connected to the correct server. Users could also confirm the SSH key fingerprint of the server to ensure the security of the connection. Last but not least, users must be careful to protect their SSH accounts with a secure password.

How to set up SSH keys

In order to create the SSH keys the user has to follow the five steps. First, users have to use the SSH-KEYGEN command. Second, users need to copy the ssh-key. After that, users have to install the SSH-KEY. To do this, the user will use the SSH-COPY-ID command. This works on a Unix or Linux server. Third, users need to add to the Wheel or Sudo group admin account. Fourth, users need to disable password Login. Fifth, users need to test their passwordless SSH-KEY Login. To do this, the user should use the SSH_USER@server-name command.

Best SSH access in hosting

Security is always at the top of the list when it comes to choosing a web hosting provider. Experts say, the user provider should use effective encryption techniques and the user should ensure that their servers are well-protected when it comes to SSH access. Ease of use is also important. Users always want a hosting company that makes it simple to set up and manage SSH access. Also, users should always take price into account, if on a tight budget. Finding a provider with affordable prices without compromising on quality or security is important. Following is a list of the top hosting companies that provide SSH access:

Bluehost: For SSH access, Bluehost is a fantastic option. Their servers are well-protected, and they provide powerful encryption techniques. Bluehost is a fantastic option for people who are new to using SSH because it is simple to set up and manage. And lastly, Bluehost provides affordable prices without compromising on reliability or security.

HostGator: A leading supplier of safe and dependable web hosting is HostGator. All of their options, including shared hosting, virtual private servers, and dedicated servers, have SSH access. To protect your data, HostGator uses reliable encryption techniques, and their servers are well-guarded. Additionally, they include an intuitive control panel that makes management simple.

InMotion Hosting: InMotion Hosting provides robust security and simple SSH access management. They have affordable prices and a variety of plans to choose from.

Third-party program protection

Different third-party applications have varying levels of security. Users might not be getting the same level of security with a less secure programme as with SSH. However, even while using a less secure tool, there are several things users can do to assist keep data secure. Users can make sure that the program being used is up to date. Older versions have security vulnerabilities that have since been fixed. Users should be careful about what information is shared through the program. Experts suggest users should not share sensitive information unless confident it will be kept safe.

Alternatives to SSH

Without using SSH, there are a few different ways to connect to a remote server. The list of SSH substitutes are as follows:

Eternal Terminal: One method for connecting to a remote server without using SSH is through Eternal Terminal. A telnet client and open-source terminal emulator, it works on all platforms. On macOS and Linux, it can be used as a drop-in replacement for the default Terminal software. It consists of features like supporting SSH, telnet, and raw socket connections, automatic reconnection, scriptable with Lua, cross-platform support for macOS, Linux, Windows, and more.

Mosh: A free and open-source alternative to the SSH terminal programme is Mosh. Any server with an active SSH daemon can be accessed with Mosh. Mosh has several features that make it more reliable than SSH, including UDP support which means that Mosh can reconnect if the connection is dropped, without losing any data. Mobile device support feature that works well on mobile devices with high latency or unstable connections.

The post Securing network traffic with SSH appeared first on International Finance.

AnyDesk remarked, “Misusing our name to spread malware is unacceptable for AnyDesk. We are committed to doing everything in our power to help end fraud attempts. Our team is already actively taking countermeasures.”

“Millions of IT professionals worldwide depend on AnyDesk to securely connect to work computers and help with technical issues. Providing them with a safe infrastructure is our top priority,” it added further.

The impersonating domains are linking to a Dropbox folder that recently released the virus called ‘Vidar’ that steals information.

AnyDesk is used by millions of people across the globe. It is a well-liked remote desktop programme for Windows, Linux, and macOS, for safe remote connectivity or carrying out system administration.

AnyDesk is frequently misused in malware distribution because of the tool’s popularity. For instance, Cyble revealed in October 2022 that the developers of Mitsu Stealer were promoting their new malware through an AnyDesk phishing site.

The latest iteration of the AnyDesk was discovered by SEKOIA threat analyst crep1x, who tweeted a warning and provided the full list of the campaign’s malicious hostnames. These hostnames all lead to 185.149.120[.]9, the same IP address.

Typosquats for major programmes including AnyDesk, MSI Afterburner, 7-Zip, Blender, Dashlane, Slack, VLC, OBS, bitcoin trading apps, and other software are included in the list of hostnames. No matter the name, all of them point to the same AnyDesk clone website.

Most domains are still active, however, some have been reported and taken offline by registrars or are banned by antivirus software. After the malicious file was reported to the cloud storage service, even for the websites that are up, their Dropbox links are no longer functional. However, the malicious attacker can easily solve this by changing the download URL to another site.

It has been found out that the websites were disseminating a ZIP file with the name “AnyDeskDownload.zip” [VirusTotal] that claimed to be an AnyDesk software installer. But instead of AnyDesk zip files ‘Vidar stealer’, a malware that has been around since 2018 has been getting installed.

Once activated, the malware will take the victims’ browsing history, login information, previously-saved passwords, cryptocurrency wallet data, banking details, and other private information. This information may be used for other nefarious purposes or sold to other malicious attackers.

In one such recent incident, a man from India lost Rs 5 lakh while attempting to fix his TV display. He reportedly downloaded the AnyDesk app on his phone and within seconds his bank account was robbed of Rs 5 lakh.

The post AnyDesk domain impersonation row: Company says countermeasures being taken appeared first on International Finance.

The website AnyDesk is used by millions of people across the globe. It is a well-liked remote desktop programme for Windows, Linux, and macOS, for safe remote connectivity or carrying out system administration.

The AnyDesk is frequently misused in malware distribution because of the tool’s popularity. For instance, Cyble revealed in October 2022 that the developers of Mitsu Stealer were promoting their new malware through an AnyDesk phishing site.

The latest iteration of the AnyDesk was discovered by SEKOIA threat analyst crep1x, who tweeted a warning and provided the full list of the campaign’s malicious hostnames. These hostnames all lead to 185.149.120[.]9, the same IP address.

Typosquats for major programmes including AnyDesk, MSI Afterburner, 7-Zip, Blender, Dashlane, Slack, VLC, OBS, bitcoin trading apps, and other software are included in the list of hostnames. No matter the name, all of them point to the same AnyDesk clone website.

Most domains are still active, however, some have been reported and taken offline by registrars or are banned by antivirus software. After the malicious file was reported to the cloud storage service, even for the websites that are up, their Dropbox links are no longer functional. However, the malicious attacker can easily solve this by changing the download URL to another site.

It has been found out that the websites were disseminating a ZIP file with the name “AnyDeskDownload.zip” [VirusTotal] that claimed to be an AnyDesk software installer. But instead of AnyDesk zip files ‘Vidar stealer’, a malware that has been around since 2018 has been getting installed.

Once activated, the malware will take the victims’ browsing history, login information, previously-saved passwords, cryptocurrency wallet data, banking details, and other private information. This information may be used for other nefarious purposes or sold to other malicious attackers.

The post Fake AnyDesk sites push info-stealing malware ‘Vidar’ appeared first on International Finance.