[Cecilia]

Göppingen/Germany, March 23, 2016. In the last couple of days, some reports surfaced which linked some ransomware infections with TeamViewer. We strongly condemn any criminal activity, however, we can emphasize two aspects:

(1) Up to now, none of the reported cases is based on a TeamViewer security breach
(2) Some selected steps will help prevent potential abuse

Ad (1.): We looked thoroughly at the cases that were reported to us. According to our investigation, the underlying security issues cannot be attributed to TeamViewer. Thus far we have no evidence that would suggest any potential security breach of TeamViewer that attackers exploit. Furthermore, a man-in-the-middle attack can nearly be excluded because of TeamViewer’s deployed end-to-end encryption. Additionally, we have no reason to believe that a brute-force attack is the origin of the reported infections. TeamViewer exponentially increases the latency between connection attempts. It thus takes as many as 17 hours for 24 attempts. The latency is only reset after successfully entering the correct password. TeamViewer not only has a mechanism in place to protect its customers from attacks from one specific computer but also from multiple computers, known as botnet attacks, that are trying to access one particular TeamViewer-ID.

Sources:
(also helps prevent it happening to you ) https://www.reddit.com/r/teamviewer/comm...practices/

https://www.teamviewer.com/en/company/pr...eamviewer/

[๖ۣۜÑåzgйŀ]

it's not an exploit those users must have used the same passwords for multiple accounts online and due to the recent database breaches of different companies they were able to log in remotely to the computer

the other thing which could have occurred is a user might have installed malware such as a keylogger or rat
with teamviewer the rat users would be able to bypass UAC prompts so it's really beneficial to them

[Cecilia]

it's not an exploit those users must have used the same passwords for multiple accounts online and due to the recent database breaches of different companies they were able to log in remotely to the computer

the other thing which could have occurred is a user might have installed malware such as a keylogger or rat
with teamviewer the rat users would be able to bypass UAC prompts so it's really beneficial to them

Yep, just letting people know that they're not so secure if they use default settings.