Suspicious Silent Anydesk Installation

Tim Peck@timpeck

•updated Dec 10, 2025•14•3•277

Detects the silent installation and configuration of AnyDesk from the command line. This technique was observed being used by actors deploying DeadLock ransomware to establish persistence.