We found one recent, notable example of an old version of TeamViewer being packaged as part of a remote access Trojan (RAT).

The user could see the logs as they appear on the second user’s desktop. We’ve even seen software such as TeamViewer being used by cybercriminals to prove legitimacy of their goods! (Figure 1)įigure 1: A forum user invites another to use TeamViewer to confirm chat log validity in a dispute. Such techniques have been called upon for some time using different legitimate software applications. Research of our cybercriminal marketplace database shows many examples of remote desktop software being used to channel hidden malicious access to victim computers. LinkedIn, MySpace, VK, Tumblr), credential theft or reuse seems like a plausible explanation.īut what about people who are not existing TeamViewer users and did not already have it installed? Considering the general frequency of phishing attacks and the recent big value leaks (e.g. In many cases, the people reporting attacks were existing users of TeamViewer. TeamViewer said that attacks were likely caused by bad password management or users’ computers being infected with malware. TeamViewer’s own site was even temporarily taken offline by a denial of service attack however, the company insisted the two were not linked. Over the last few weeks, there have been a number of reports of attacks using the remote desktop control software TeamViewer, with many users’ machines being taken over to install ransomware or steal money from their online accounts.

What is teamviewer service