Software - Cyber attack on remote maintenance software provider Teamviewer
The German software provider Teamviewer has, according to its own statements, become a victim of a cyberattack. On a Wednesday, the security team of Teamviewer detected an "anomaly" in the internal IT environment, as reported on the TecDax website. The defense team was immediately activated and appropriate processes were initiated. "Together with globally recognized IT security experts, we have immediately begun investigations and implemented necessary protective measures."
Teamviewer is one of the largest providers of remote maintenance software, which is used in companies, among other things, to access the screens of employees to resolve a service request. Via this channel, one can also access sensitive information. Teamviewer emphasized that the internal IT environment of the company is completely independent of the product environment. "There are no indications that our product environment or customer data have been affected. The investigations are ongoing, and our main focus remains on ensuring the integrity of our systems."
The Heise.de portal referred to information from various IT security organizations' environments, according to which the attack targeted the account of an APT group (Advanced Persistent Threat). Behind APT groups are usually state actors. In social networks, an extract from a memo of the IT security company NCC Group circulates, in which a significant compromise by an APT group is mentioned. According to this, it should be about "Cozy Bear≥, a group controlled by the Russian intelligence service SVR. The Kremlin hackers are also suspected of attacking several German parties with malware."
Teamviewer-Statement Report Heise.de
- The cyberattack on Teamviewer, a renowned software provider based in Göppingen, Germany, part of Baden-Württemberg, was detected on a Wednesday within their internal Telecommunications system.
- Subsequent to the detection of an anomaly, the company swiftly activated their defense team and initiated appropriate processes to mitigate the issue.
- Teamviewer plays a significant role in the Telecommunications sector, providing remote maintenance Software used by numerous companies, including accessing employee screens for service requests, potentially exposing sensitive information.
- Despite the cyberattack, the company reassured its users that their internal IT environment remains separate from the product environment and no indications suggest product environment or customer data were affected.
- Investigations into the cyberattack continued, and the company acknowledged collaboration with globally recognized IT security experts to implement protective measures.
- Speculation about the cyberattack hinted at involvement of an Advanced Persistent Threat (APT) group, with some sources pointing to Cozy Bear≥, a group linked to the Russian intelligence service SVR, as the culprit.
- Cyberattacks and cyber espionage, falling under the broader category of Crime, pose significant threats to companies worldwide, demanding constant vigilance and response strategies.
