TeamViewer attacked by hackers
TeamViewer attacked by hackers#### TeamViewer warns that its corporate environment has been compromised by a hacking attack by the ATP29 group
TeamViewer has warned that its corporate environment has been compromised by a cyber-attack, which the cybersecurity firm believes was carried out by the APT hacking group.
“On Wednesday, 26 June 2024, our security team detected an irregularity in our internal corporate IT environment. We immediately activated our response team and procedures, initiated an investigation with a team of globally recognised cybersecurity experts, and implemented the necessary corrective actions.” TeamViewer said News of the breach was first posted on Mastodon by IT security expert Jeffrey, who shared parts of the alert shared on the Digital Trust Center, a Dutch portal used by the government, security experts and Dutch companies to share information about cybersecurity threats.
On 27 June 2024, Health-ISAC received information from a trusted intelligence partner that APT29 was actively using Teamviewer. APT29 is a Russian group affiliated with the Russian Foreign Intelligence Service (SVR).
“Health-ISAC recommends reviewing logs and detecting unusual remote desktop traffic. Threat actors have been observed using remote access tools. Teamviewer has been observed to be used by attackers associated with APT29”.
TeamViewer says it intends to be transparent about the breach and will continue to update the status of the investigation as more information becomes available.
Although it says it is trying to be transparent, the “TeamViewer IT security update” page contains the HTML tag noindex <meta name=”robots” content=”noindex”>, which prevents search engines from indexing the document.