NightSpire Ransomware AnyDesk Persistence

Duo Tech@duotech

•updated Jun 9, 2026•1•0•6

Detects the execution of AnyDesk using command line flags to run as a service or control utility, which is indicative of NightSpire ransomware persistence mechanisms.