TeamViewer got owned (again) by Russia. https://infosec.exchange/@jtig/112689362692682679
Update confirming Russia: https://www.teamviewer.com/en/resources/trust-center/statement/
TeamViewer update, they believe it is restricted to their corporate environment only.
TeamViewer incident looks pretty small and contained: https://therecord.media/teamviewer-cyberattack-employee-directory-encrypted-passwords
I do wonder how this one got out into the public - rumours were abound in IR and CTI circles about TeamViewer being compromised before this was made public by TeamViewer.
@GossiTheDog sure, but what’s the likelihood that’ll result into compromises elsewhere? I’m not holding my breath.
@GossiTheDog "I believe I can fly..."
@GossiTheDog
I really would like to know what is the case with development systems? Source code and the build infrastructure?
I'm not sure if this really counts as "production" and I have my doubts about a total separation of development and IT infrastructure
@GossiTheDog if the hackers found the "commercial usage detected" killswitch and sabotaged it, they get my applause
@GossiTheDog
TeamViewer: “restricted to corporate network”
File name customer-passwords.xlsx:
@GossiTheDog Sooo, was the account's MFA MITM'd, or did it not exist ?