Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[PSA] UNINSTALL TEAMVIEWER!

Uninstall TeamViewer, The database has been hacked.

from /u/executioner1337 on reddit.


This issue is not getting enough attention, please spread it.
Users are reporting breaches, and thousands of dollars have been stolen with the client, all over /r/teamviewer and at their support Twitter account. TV is blaming users with reusing passwords, yet users with 2FA and unique very long generated passwords were hacked.
Some also suggest that their DNS servers were hijacked and the clients believed the fake server, being the method of the attack.
One of the main problems are that they are not taking responsibility: (quoted from /u/rich-uk )
Teamviewer is being used as a vector of attack. This has happened on other sites where they had no critical information and within 48 hours everyone's logged in sessions were logged out, an email went round saying you had to click the link in the email (to verify ownership) and set up two factor auth as they knew they were being targeted. Teamviewer must know they are being targeted, and the stakes are high as the software allows complete access to a trusted machine - it's basically a master key - and there hasn't been a single response with teeth from teamviewer.
Update: TV still denies a breach even with this thread linked .
A few links:
Their official statement blaming user's passwords - archive.is snapshot
Their support Twitter account with user interactions - [Mirror of some] [canned replies] [in case they take them down] , archive.is snapshot of some
TV threatening writers to change articles
The /r/teamviewer megathread
The Register article on the issue - They are getting canned replies too.
Inquisitr article on the issue
Alternatives:
LogMeIn - Now non-free, and had a bad reputation since "Microsoft Support" phone scammers used it. Trials available.
Chrome Remote Desktop - You may be not able to control remotely if the user is not logged in (for unattended access).
RealVNC - Free only for non-commercial use.
TightVNC - Free for any use, open source.
UltraVNC - [AdBlock blocking] uvnc.com is their site, ultravnc.com seems to be redirecting to RealVNC - domain squatting?
Remote Desktop Connection - Built-in, only for Windows, third party clients available.
GotoMyPC - Paid with trial.
ScreenConnect - Paid with trial.
Bomgar - Paid, seems to be more aimed at enterprise users.
Other remote desktop software on Wikipedia
Edit nth: Added some more alternatives, adblock warning at UVNC, also thanks for the gold kind stranger!
Edit nth+1: TV looks like now threatening publications and writers. Edit nth+2: Thanks for the second gold, kind anonymous stranger! Added a comparison page suggested in the comments. Also added an another TV reply.
Edit nth+3: Have had an another alternative suggested. Three gildings, thank you!
I would not suggest any of the VNC clients as they do not use encryption
RDP I would not recommend either


I would only suggest using SSH with tightVNC to secure the VNC connection

teamviewer uses encryption too as well as it stops bruteforcing but what happened recently is making me reconsider using it.
if you are going to use teamviewer then make sure that you lock your desktop before exiting the teamviewer session
this means that hacker's will have no access to your computer
According to TeamViewer, they have not been hacked and there has been no official word as to whether they have or have not been (whether it be from security experts or otherwise). So far, all we have are a number of users stating that they have lost information. TeamViewer could very well be correct in stating that the users affected had utilized poor password policies. There's no way to know if the people claiming that they had 2FA enabled, actually had it enabled.

Regardless of the above, I would NEVER run TeamViewer on start-up, and if I did, I would utilize the whitelist feature almost exclusively.
nothing
User: Umm, mate I think you just got hacked. Totally not getting my PayPal drained.
TeamViewer: Fuck off.
User: About that, everyone who used TV is getting compromised.
TeamViewer: Then why did you use the same password on two sites? We didn't get hacked. Nothing is wrong.
User: But you quite obviously did...
*User is banned on TV forums*
You can also add Ammyy Admin.

http://www.ammyy.com/en/index.html
[Image: ebisfS8.png]
I need something that I can connect to my PC on, with my phone.

As far as I know, TV is the only thing that can do that.
(Jun 4, 2016 06:18 AM)SIM-2285183 Wrote:  I need something that I can connect to my PC on, with my phone.

As far as I know, TV is the only thing that can do that.

just lock your windows computer with a good unique password
if they compromise your Teamviewer they won't be able bypass that
(Jun 4, 2016 06:18 AM)SIM-2285183 Wrote:  I need something that I can connect to my PC on, with my phone.

As far as I know, TV is the only thing that can do that.

Have not tried it yet but I found this a while back.

https://www.bomgar.com/


Possibly Related Threads...
Thread / Author Replies Views Last Post
by sticksdevSep 11, 2022 09:02 AM 3 327 Sep 11, 2022 09:02 AM
Last Post: sticksdev
[Check-Up] by beam2546Mar 30, 2018 02:32 PM 2 190 Mar 30, 2018 02:32 PM
Last Post: Elitas
by roto25Mar 9, 2018 09:03 PM 21 316 Mar 9, 2018 09:03 PM
Last Post: Sigma