TeamViewer Remote Access Customers Hacked

Management at TeamViewer, a remote access computer tool, have confirmed that a "significant number" of users have fallen prey to hackers. However, the company insists that all evidence suggests that there is no flaw in the system, but is instead pointing fingers at its users.

TeamViewer allows users to login to a remote computer (even their own) from anywhere with an Internet connection. Once connected, users can operate the computer just as if they had physical access to the machine.

The security for the system works in two ways: first, users get a reference number that identifies their particular computer, rather than using an email address or user name. Secondly, a password is issued to match the reference number in order to gain access to the system.

Multi-Machine Accounts Could be the Cause

There's also a second method, which is to set up an account that covers multiple machines - something that's more commonly used by businesses. Rather than an identification number for the machine, the TeamViewer account uses an email address and password for authentication. Anyone who has access to these details can access any of the machines covered by the account.

TeamViewer is adamant that the hacking is the result of people getting hold of account email addresses and passwords, and notes that the breaches came right after a range of databases of old email/password combinations from other high-profile sites became public. Spokesman Axel Schmidt believes it's likely people reusing passwords across different sites is a major factor in this situation. (Source: arstechnica.com)

Two Factor Authentication in Dispute

Some say that they were hacked by TeamViewer despite having two-factor authentication switched on, meaning that the owner of the remote computer should have received a text message with a confirmation code whenever someone is requesting to login to the machine from a new location. Schmidt says he's found no evidence this is the case, and claims that so far no one has prepared to pass over log files that could help the company investigate the issue.

Financial Accounts Reportedly Drained

It appears the hackers have mainly been using their unauthorized access to the victims' computers to attempt to log in to financial accounts and siphon away money, or use services such as the iTunes Store to buy digital gift cards and voucher codes which they can sell on the black market. These attacks usually only work where the user has the relevant site password stored in their browser's auto-fill feature or a password manager. (Source: observer.com)

What's Your Opinion?

Do you think TeamViewer is right to blame the issue on poor personal security practices? Would you ever use a remote access tool or does the security risk outweigh the convenience? If somebody got access to your PC, could they access sensitive websites using the auto-fill feature - or do you always manually type in the relevant passwords?