Has TeamViewer Been Hacked:Reddit Users Say Yes
Posted by: Timothy Weaver on 06/06/2016 09:19 AM
[
Comments
]
Users on Reddit are claiming that TeamViewer must have been breached because their Paypal and banking accounts have been drained of funds and malicious software installed on their systems.
TeamViewer has issued a statement saying: “There is no evidence to suggest that TeamViewer has been hacked. Neither do we have any information that would suggest that there is a security hole in TeamViewer.”
However, users have taken a look at their log connections and found unknown computer logins from unknown locations.
TeamViewer is saying that the fault lies with users who are using the same passwords for multiple accounts. It is possible that with the breaches to MySpace, Tumblr and LinkedIn, criminals are trying out passwords to multiple systems. Reddit users are saying that it does not account for those users who are using two-factor authorizations and are still getting hacked.
John Christly, CISO of Netsurion commented: “If you use any remote access software on your computer, you should immediately check the security of how it is setup. First and foremost, if you no longer need to use the remote access software, then remove it. If you are unsure if it has been setup securely or not – then remove it; you can consult with someone that can help you get it setup securely. If you have to continue to use the remote access features, then you should be sure that any passwords you may be using are unique and very strong and that you are not using the same password for any other systems or accounts.”
To combat the possibility of being hacked, TeamViewer has created two new security systems. The first is called Trusted Devices which when a user is using a different device to log in, an email notification is sent to the users email account to verify the log in.
The company's second feature is named Data Integrity and will work by monitoring a user's account activity.
If TeamViewer's system detects unusual behavior, such as logins from a new location, the Data Integrity service forces a password reset. The user would then have to go to their email account and follow the instructions to set a new password.
Source: SCMagazine

However, users have taken a look at their log connections and found unknown computer logins from unknown locations.
TeamViewer is saying that the fault lies with users who are using the same passwords for multiple accounts. It is possible that with the breaches to MySpace, Tumblr and LinkedIn, criminals are trying out passwords to multiple systems. Reddit users are saying that it does not account for those users who are using two-factor authorizations and are still getting hacked.
John Christly, CISO of Netsurion commented: “If you use any remote access software on your computer, you should immediately check the security of how it is setup. First and foremost, if you no longer need to use the remote access software, then remove it. If you are unsure if it has been setup securely or not – then remove it; you can consult with someone that can help you get it setup securely. If you have to continue to use the remote access features, then you should be sure that any passwords you may be using are unique and very strong and that you are not using the same password for any other systems or accounts.”
To combat the possibility of being hacked, TeamViewer has created two new security systems. The first is called Trusted Devices which when a user is using a different device to log in, an email notification is sent to the users email account to verify the log in.
The company's second feature is named Data Integrity and will work by monitoring a user's account activity.
If TeamViewer's system detects unusual behavior, such as logins from a new location, the Data Integrity service forces a password reset. The user would then have to go to their email account and follow the instructions to set a new password.
Source: SCMagazine
Comments