3 ms·
Be sure to use 2FA on TeamViewer. 3 months ago accounts were bruteforced and thousands of PC's were hacked as a result of guessing the one-time-user-password (4
by Mandatum 10y ago
Be sure to use 2FA on TeamViewer. 3 months ago accounts were bruteforced and thousands of PC's were hacked as a result of guessing the one-time-user-password (4-digits).
TeamViewers response was to bury their head in the sand until Ars interviewed them to which they said "none of this is our fault, 2FA is working fine, people being hacked is unrelated to TeamViewer".
In reality TeamViewer wasn't properly rate limiting or blacklisting IP's for making too many guesses at the one-time-password. They made no customer outreach to suggest using 2FA. They didn't acknowledge the attack for 2 weeks until the Ars article, aside from replies to emails saying they should talk to their local police department.
TeamViewer is still the best tool out there for remote access for Windows computers on corporate networks and personal use I find. However their handling of the attack was pathetic.