lgwhe.blogg.se - Free teamviewer hangs up

When 2FA is enabled it makes any account that little bit safer on the login-side and works by using one one ‘static’ password and one variable one that changes with each login and is sent to either your phone or any device of your choosing. This is called 2FA, or two-factor-authentication. There is another feature in TeamViewer that can be enabled. If the credentials were stolen, they are now rendered useless. This means that every TeamViewer User account needs to enter a new password.

Password Reset : TeamViewer has marked ALL user accounts to renew their password.

Data Integrity : This feature will track the ‘normal’ behaviour and alerts whenever control is done from a non-standard location.

So if the IT-admin, helpdesk-employee, or yourself, are logging in to remote machines, the user behind the keyboard needs to approve this connection.

Whitelist TeamViewerID : All previously approved incoming connections need to be confirmed once again to allow the remote-control.

As such, TeamViewer itself has released two new features and forced a reset of the login password: Instead of trying to point the finger at who is at blame, it might be a better idea to first secure yourself and start solving the issue. At the time of writing, the investigation is not yet closed. The reports of compromised user however show it was an attack targeted on TeamViewer users (the remote control side). There was no real proof (presented) whether or not TeamViewer itself was hacked, but 642 million user-accounts are now considered to be out in the open. On the other hand, users with strong, unique passwords were also compromised. When this password is breached, an outsider can take over machines that are under remote control. The people who have access to remote machines could have used weak passwords, or re-used passwords to have ease-of-use while logging in.

The official answer from TeamViewer is ‘no’. But does this mean TeamViewer was hacked? Users of TeamViewer saw the TeamViewer-box pop-up, saw their mouse move and even noticed payments were completed through eBay or PayPal accounts, without the consent of the user behind the keyboard. The hack means that everyone who has the solution installed, needs to either change their password, access-code, and needs to see if unwanted payments have been done.

A TeamViewer spokesman speaking with Arstechnica said that ‘the number of takeovers was “significant,” but he continued to maintain that the compromises are the result of user passwords that were compromised through a cluster of recently exposed megabreaches.’ Some users, however, also reported breaches even when 2FA was used, but TeamViewer is said to have investigated these instances when log files were provided and found no evidence of 2FA being breached. In the past days there were news posts saying the widely used remote control solution TeamViewer had been breached.