Remote Access Tool - AnyDesk Piped Password Via CLI

SigmaHQ Detections@sigmaHQ

•updated Jun 13, 2025•0•13

Detects the piping of a password to an AnyDesk instance via the command line using the '--set-password' flag. This technique can be used by adversaries to programmatically set a password for AnyDesk, potentially for remote access.