\n<\/p>\n
TeamViewer, the company that makes widely used remote access tools for companies, has confirmed an ongoing cyberattack on its corporate network.\u00a0<\/p>\n
In a statement Friday<\/a>, the company attributed the compromise to government-backed hackers working for Russian intelligence, known as APT29 (and Midnight Blizzard).<\/p>\n The Germany-based company said its investigation so far points to an initial intrusion on June 26 \u201ctied to credentials of a standard employee account within our corporate IT environment.\u201d\u00a0<\/p>\n TeamViewer said that the cyberattack \u201cwas contained\u201d to its corporate network and that the company keeps its internal network and customer systems separate. The company added that it has \u201cno evidence that the threat actor gained access to our product environment or customer data.\u201d\u00a0<\/p>\n Martina Dier, a spokesperson for TeamViewer, declined to answer a series of questions from TechCrunch, including whether the company has the technical ability, such as logs, to determine what, if any, data was accessed or exfiltrated from its network.<\/p>\n TeamViewer is one of the more popular providers of remote access tools, allowing its corporate customers \u2014 including shipping giant DHL and beverage maker Coca-Cola, per its website<\/a> \u2014 to access other devices and computers from over the internet. The company says it has more than 600,000 paying customers<\/a> and facilitates remote access to more than 2.5 billion devices around the world.\u00a0<\/p>\n TeamViewer is also known to be abused by malicious hackers<\/a> for its ability to be used to remotely plant malware on a victim\u2019s device.\u00a0<\/p>\n It\u2019s not known how the TeamViewer employee\u2019s credentials were compromised, and TeamViewer did not say.\u00a0\u00a0<\/p>\n The U.S. government and security researchers have long attributed APT29 to hackers working for Russia\u2019s foreign intelligence service, the SVR. APT29 is one of the more persistent, well-resourced government-backed hacking groups, and known for its use of simple but effective hacking techniques \u2014 including stealing passwords \u2014 to conduct long-running stealthy espionage campaigns that rely on stealing sensitive data.\u00a0<\/p>\n TeamViewer is the latest tech company targeted by Russia\u2019s SVR of late. The same group of government hackers compromised Microsoft\u2019s corporate network earlier this year to steal emails from top executives to learn what was known about the intruding hackers themselves<\/a>. Microsoft said other tech companies were compromised<\/a> during the ongoing Russian espionage campaign, and U.S. cybersecurity agency CISA confirmed federal government emails hosted on Microsoft\u2019s cloud<\/a> were also stolen.<\/p>\n Months later, Microsoft said it was struggling to eject the hackers from its systems<\/a>, calling the campaign a \u201csustained, significant commitment\u201d of the Russian government\u2019s \u201cresources, coordination, and focus.\u201d<\/p>\n The U.S. government also blamed Russia\u2019s APT29 for the 2019-2020 espionage campaign targeting U.S. software firm SolarWinds<\/a>. The cyberattack saw the mass-hacking of U.S. federal government agencies by way of planting a hidden malicious backdoor in SolarWinds\u2019 flagship software. When the tainted software update was pushed out to SolarWinds\u2019 customers, the Russian hackers had access to every network running the compromised software<\/a>, including the Treasury, Justice Department, and the Department of State.<\/p>\n Do you know more about the TeamViewer cyberattack? Get in touch. To contact this reporter, get in touch on Signal and WhatsApp at +1 646-755-8849, or by email.<\/a> You also can send files and documents via SecureDrop<\/a>.<\/em><\/p>\n
\n