TeamViewer Detects Security Breach in Corporate IT Environment

TeamViewer on Thursday disclosed it detected an “irregularity” in its inside company IT ecosystem on June 26, 2024.

“We immediately activated our reaction group and methods, started off investigations collectively with a workforce of globally renowned cyber security specialists and executed vital remediation actions,” the firm stated in a statement.

It even more pointed out that its corporate IT surroundings is wholly reduce off from the products natural environment and that there is no evidence to point out that any purchaser details has been impacted as a result of the incident.

It did not disclose any facts as to who might have been at the rear of the intrusion and how they were being capable to pull it off, but stated an investigation is underway and that it would offer standing updates as and when new details results in being out there.

TeamViewer, primarily based in Germany, is the maker of remote monitoring and management (RMM) software program that enables managed company companies (MSPs) and IT departments to handle servers, workstations, network gadgets, and endpoints. It is applied by about 600,000 prospects.

Curiously, the U.S. Health Data Sharing and Evaluation Middle (Health-ISAC) has issued a bulletin about threat actors’ energetic exploitation of TeamViewer, in accordance to the American Medical center Affiliation (AHA).

“Risk actors have been observed leveraging distant accessibility tools,” the non-income reportedly reported. “Teamviewer has been observed currently being exploited by risk actors related with APT29.”

It truly is at this time unclear at this stage whether this signifies the attackers are abusing shortcomings in TeamViewer to breach client networks, working with inadequate security techniques to infiltrate targets and deploy the application, or they have carried out an attack on TeamViewer’s personal units.

APT29, also referred to as BlueBravo, Cloaked Ursa, Cozy Bear, Midnight Blizzard, and The Dukes, is a point out-sponsored danger actor affiliated with the Russian Foreign Intelligence Company (SVR). Not too long ago, it was joined to the breaches of Microsoft and Hewlett Packard Business (HPE).

Microsoft has given that discovered that some shopper email inboxes have been also accessed by APT29 adhering to the hack that came to light-weight earlier this yr, for every experiences from Bloomberg and Reuters.

“This 7 days we are continuing notifications to shoppers who corresponded with Microsoft corporate email accounts that were exfiltrated by the Midnight Blizzard menace actor,” the tech large was quoted as indicating to the news company.

Uncovered this report intriguing? Comply with us on Twitter  and LinkedIn to study extra exclusive written content we publish.

Some parts of this article are sourced from:
thehackernews.com