Teamviewer Has Been Hacked.

[Portugapt 342]

TeamViewer has been hacked. They are denying everything and pointing fingers at the users.

https://www.reddit.com/r/technology/comments/4m7ay6/teamviewer_has_been_hacked_they_are_denying/

 

TeamViewer has yet to leave a comment on the issue that's not in complete denial of the problem.

Users are reporting breaches, and thousands of dollars have been stolen with the client, all over /r/teamviewerand at theirsupport Twitter account

 

. TV is blaming users with reusing passwords, yet users with 2FAand unique very long generated passwordswere hacked.

 

Some also suggest that their DNS servers were hijacked and the clients believed the fake server, being the method of the attack.

One of the main problems are that they are not taking responsibility: (quoted from /u/rich-uk )

Teamviewer is being used as a vector of attack. This has happened on other sites where they had no critical information and within 48 hours everyone's logged in sessions were logged out, an email went round saying you had to click the link in the email (to verify ownership) and set up two factor auth as they knew they were being targeted. Teamviewer must know they are being targeted, and the stakes are high as the software allows complete access to a trusted machine - it's basically a master key - and there hasn't been a single response with teeth from teamviewer.

A few links:

• Official statement blaming user's passwords
   
  - archive.is snapshot
   
• Support Twitter account with user interactions
   
  - [Mirror of some] 
   
  [canned replies] 
   
  [in case they take them down] 
   
  , archive.is snapshot of some
   
• Twitter account, seems to be empty
   
  - archive.is snapshot
   
• Facebook page with people's posts
   
  - archive.is snapshot
   
• TV threatening writers to change articles- archive.is snapshot
   
• The /r/teamviewer megathread
• The Register article on the issue
   
  - They are getting canned replies too. archive.is snapshot
   
• Inquisitr article on the issue
   
  - archive.is snapshot
   
• CloudPro article on the issue
   
  - archive.is snapshot
   
• TV still denies a breach even with this thread linked 
   
  . - archive.is snapshot
   

Some support:

• Check if your TV Account was hacked into
• Check your logs! If you had someone connect to your machines, they may have ran a browser password sniffer program
• Security practices in case you still want/need to use TV
• Hack survey
   

Alternatives:

Name Free or Paid Trial available Aimed at Home or Enterprise users Open Source For Unattended Remote Desktop or Remote Assistance Notes LogMeIn

 

Paid Yes Enterprise No Both Now non-free, and had a bad reputation since "Microsoft Support" phone scammers used it. Some suggest that a long time ago it had bad support. Chrome Remote Desktop

 

Free -- Home The browser part of it

 

Both -- Remmina

 

Free -- Both Yes Unattended RD Linux and Unix only. RealVNC

 

Paid and Free* Yes Both Current version is not Unattended RD *Free only for non-commercial use. TightVNC

 

Free -- Both Yes*

 

Unattended RD *Source code for commercial use requires a license UltraVNC

 

Free -- Both Yes*

 

Unattended RD ultravnc.com is not their site, squatted by RealVNC. *Sourceforge link MS Remote Desktop Connection Free* -- Enterprise No Unattended RD** Windows built-in. *Home versions of Windows only connect to other machines, not connected to. **Disables the computer from being used while an RD connection is running. The user may interrupt it. GotoMyPC

 

Paid Yes Enterprise No Unattended RD -- ScreenConnect

 

Paid Yes Enterprise No Both -- Bomgar

 

Paid Yes Enterprise No Both -- Ammyy Admin

 

Paid and Free* No Both No Unattended RD Also had a bad reputation for tech support scammers using it. *Free for non-commercial use. AnyDesk

 

Paid and Free* No Both No Unattended RD -- Jump Desktop

 

Paid No Enterprise No Unattended RD Only an RDP+VNC client, needs a server. Android, OSX, iOS only. NoMachine

 

Paid and Free* Yes Both No Unattended RD *Free for non-commercial use. Licensing is per CPU-cores. SplashTop

 

Paid and Free* Yes Both No Both *Free for non-commercial use.

Notes:
Apps that I listed as non-open source may have open source components.
Other remote desktop software on Wikipedia

 

 

Edit nth: Added some more alternatives, adblock warning at UVNC, also thanks for the gold kind stranger!
Edit nth+1: TV looks like now threatening publications and writers.
Edit nth+2: Thanks for the second gold, kind anonymous stranger! Added a comparison page suggested in the comments. Also added an another TV reply.
Edit nth+3: Have had an another alternative suggested. Three gildings, thank you!
Edit nth+4: I got some PMs that suspiciously sounded like advertisements, I only added only the bigger alternatives. Added some details on alternatives, tell me if I got anything wrong. Added lots of snapshots in case someone takes the originals down. Thanks for everyone's support!
Edit nth+5: Added some links for help.

 

---

 

Desculpem pelo formato, vejam o reddit thread em vez de aqui tho.