Slashdot Mirror
TeamViewer Servers Go Down, Users Believe They Are Hacked (softpedia.com)
An anonymous reader quotes a report from Softpedia: Something is happening with TeamViewers servers at the moment, and all clues point to a massive breach that has led to many users going on Reddit and complaining about having their computers hacked. Some users have reported finding new transactions in their PayPal and bank accounts, while others discovered someone had been poking around their email account. Other lucky users said they barely avoided getting hacked at the last minute, noticing their mouse starting to move across the screen, and hurrying to disconnect their Internet connection. On Twitter, the TeamViewer team wrote that they're only experiencing issues in some parts of their network, but they denied any security breach, at least on their side. In the past months, we've seen malware use TeamViewer many times to infect computers, but most of those cases were because of users who used weak passwords, which is certainly not TeamViewer's fault. It is strange that this time around, just when TeamViewer servers go down, multiple users also flock to social media to complain about getting hacked. This is either one huge strange cosmic coincidence or TeamViewer is really at fault and won't be able to pin the blame on its users. On a semi-related note, PayPal will be suspending their business operations in Turkey after failing to obtain a new license for its service in the country.
I don't think there is an OS today that doesn't have built-in remote support... why would you ever install some shady 3rd party program?
What is the builtin remote support for windows that is actually worth a damn? What about OSX?
Teamviewer is crossplatform (mac, PC, and Linux, ios, and android...); and quite frankly it's, very, very good. It works behind firewalls. It plays well with UAC.
It's pretty inexpensive even for commercial use, and free for personal use. Its not even slightly shady.
There are a few other solutions but most that I've tried are flaky crap by comparison, and the other good ones cost more.
You saw logs that confirm that someone gained unauthorized entry into your system? Your system is compromised. And even if it's not, you should assume it is.
You should immediately:
1) Unplug the network connection.
2) Back up any important files to a WORM media device, like a DVD. Don't plug a write-many device into your computer.
3) Wipe all drives.
4) Check all drives (and any write-many devices you've plugged in to the system) for boot-sector nasties.
5) Reinstall everything. Except TeamViewer, of course, because you should've learned that lesson by now.
Alternately, you can restore from a recent (but prior to, say, last week) full system backup if you have one. Make sure you still back up any files changed since then. Also make sure you uninstall TeamViewer completely once you do that.
This is the only way to be sure. Don't just cross your fingers. Cross your T's and dot your I's. You've already had a financial attack against you. There will be more.