Pierluigi Paganini June 02, 2016

Many TeamViewer users reported that their systems were accessed by hackers via the popular support tool, but the company denies any incident.

Many TeamViewer users reported that their systems were accessed by hackers via the popular support tool, but the company denies any security breach.

First claims appeared on Reddit, several users reported that unauthorized parties remotely accessed their systems through TeamViewer. In same cases, the mysterious attackers attempted to steal money from users’ PayPal accounts in order to purchase items one-commercee platforms, including eBay. This was possible because victims use to configured to remember credentials for commonly used online services.

The mysterious thing is that some users also reported to have been hacked even with a two-factor authentication (2FA) enabled.

Below a couple of messages published on the thread in Reddit.

Many Internet users speculate that the tool was hacked, another possibility is that hackers have identified a zero-day flaw in the popular application. On the other side, the company downplayed both hypotheses explaining that most likely attackers leveraged leaked passwords that were shared by users on multiple web services.

“As always when we receive alerts about potential security alerts, we look at the issue at hand. This is what we have done in this case: There is no evidence to suggest that TeamViewer has been hacked. Neither do we have any information that would suggest that there is a security hole in TeamViewer. Therefore it it is important to stress there are no TeamViewer hackers, but rather data thieves that will steal information from other sources. It is critical to make sure attention is not diverted from the real issue.” states the official note released by TeamViewer.

I believe that the explanation provided by the company is plausible due to the recent major breaches, including the one suffered by MySpace and LinkedIn

“TeamViewer is safe to use, because TeamViewer has proper security measures in place including end-to-end encryption to prevent man-in-the-middle attacks, anti-brute-force means, and more.” continues TeamViewer,

TeamViewer urges its users to adopt a strong, unique passwords and enable the two-factor authentication on their accounts. Wait a moment, but I told you before that users reported alleged hack even when the 2FA was enabled.

Another mysterious circumstance is a service outage suffered by TeamViewer on Wednesday, an incident that someone linked to an alleged cyber attack.

Stay Tuned …

If you appreciate my effort in spreading cyber security awareness, please vote for Security Affairs as best European Security Blog. Vote SecurityAffairs in every section it is reported. I’m one of the finalists and I want to demonstrate that the Security Affairs community a great reality.

https://www.surveymonkey.com/r/secbloggerwards2016

Thank you

Pierluigi

Pierluigi Paganini

(SecurityAffairs – TeamViewer, hacking)

[adrotate banner=”5″]

[adrotate banner=”13″]