Mad Liberator’s Anydesk Exploits: How Cyber Crooks Are Stealing Data and Ransoms
Mad Liberator, a new extortion gang, uses Anydesk to steal data and demand ransoms without encrypting files. Sophos X-Ops notes the crew emerged mid-July, employing double-extortion tactics. This gang’s use of a legitimate remote access tool tricks employees into granting access, proving cybercrime can be as sneaky as it is audacious.

Hot Take:
Looks like the Mad Liberator gang just earned a PhD in “How to Annoy Everyone Without Encrypting a Single File.” Who needs ransomware when you have social engineering and Anydesk on speed dial?
Key Points:
- Mad Liberator uses Anydesk for data theft and extortion.
- No evidence of encryption by Mad Liberator, but they use double-extortion tactics.
- The gang uses fake Windows update screens to trick victims.
- They operate a leak site to publicly shame victims.
- Victims often fall for the attack due to familiarity with Anydesk.
Already a member? Log in here