My computer was compromised through team viewer this weekend

|Blunt

Well-Known Member
Joined
Feb 6, 2008
Messages
280
Reaction score
14
Location
Evander, Mpumalanga
Just a bit of a warning. Over the weekend someone logged onto my computer while i was sleeping through team viewer and made fraudulent purchases with my credit card through paypal

They bought bonds on the online game Runescape for $60 - I imagine they were coming back for more as i caught them when they tried to log on again to try and cheat me out of my money for a 2nd time

Some info

I have a few devices linked to my T-V account they seemed to check all of them
all them had additional passwords required to connect to the devices
This happened to another one of my online buddies, he caught them trying to buy stuff off ebay

I have reported this to paypal and they refuse to help me as they say the payment was done securely - I have re opened the dispute
I have contacted my bank and they will get back to me

I have tried to find out if Team Viewer has been compromised but they flat out refuse to acknowledge this
What worries me, if you follow a stream of reports from users this week that the exact same thing happened to them

Id like to find out if someone has had similar experience over the last week or so
What the chances of me getting my money back is
 
Last edited:
Oddly enough, I had someone repeatedly connecting to TeamViewer on my laptop on Saturday, fortunately, I was on the thing, I kept kicking them off until I changed my TeamViewer password. How they got direct access is beyond me. I am the only person that uses TeamViewer in our household.

This isn't the first time in the past couple of weeks I've had unusual behaviour from teamviewer, about two weeks ago some random person added me as a contact, and I couldn't delete them.

Starting to think TeamViewer has been compromised.
 
Well that seems a little silly.

You might have luck with the bank - but I wouldn't hold my breath.

Luckily it was only $60 though.

I'd suggest not leaving team viewer running and maybe putting a firewall up on your network - disallow all incoming connections.
 
its logged in on my personal computer

Financial liability is then unfortunately on you, and I don't think you're going to be able to claim it back.

How did they authenticate through Team Viewer? Surely you would have to send the person trying to connect a password, which they would have to enter to gain access to your machine...
 
its logged in on my personal computer

/facepalm

NEVER save login info on your computer with anything to do with banking. Go remove the saved password right now, okay?

Set a password on your browser to require a one time password each time it starts to access saved passwords. And for the love of all things purple, make sure your email and bank accounts require cell phone sms code based authentications.
 
Oddly enough, I had someone repeatedly connecting to TeamViewer on my laptop on Saturday, fortunately, I was on the thing, I kept kicking them off until I changed my TeamViewer password. How they got direct access is beyond me. I am the only person that uses TeamViewer in our household.

This isn't the first time in the past couple of weeks I've had unusual behaviour from teamviewer, about two weeks ago some random person added me as a contact, and I couldn't delete them.

Starting to think TeamViewer has been compromised.

Good to know - Thanks for you reply

Yea i understand good security practices - However not for a single moment did i think i was vulnerable through teamviwer as i have passwords on my account and then devices too

Can we stay on topic. I really dont feel like getting the 2nd degree from a bunch of know it alls ;)
 
Probably a port scanner followed by a brute force password attack on the Teamviewer. A simple password can be cracked quite quickly like that. For security, it should lock up after a number of invalid attempts but I don't know Teamviewer that well?
 
Financial liability is then unfortunately on you, and I don't think you're going to be able to claim it back.

How did they authenticate through Team Viewer? Surely you would have to send the person trying to connect a password, which they would have to enter to gain access to your machine...

My teamviewer account has all my devices linked.
So if you get the password you can basically connect to any of my devices.

....FEK.
 
OP: you sure you don't have any malware or the like running on your machine that they could've used to nick your TV password?
 
You can never be 100% sure but I'm pretty sure i don't. I run ESET which keeps my nose pretty clean
I dont launch dodgy software on my devices. Been through all running processes nothing seems out of the normal
Nothing else was compromised
 
You can check the teamviewer log file of any activity that had happened.
If you have the latest team viewer installed the log file will be at the current location:
C:\Program Files (x86)\TeamViewer\TeamViewer11_Logfile.log
 
/facepalm

NEVER save login info on your computer with anything to do with banking. Go remove the saved password right now, okay?

Set a password on your browser to require a one time password each time it starts to access saved passwords. And for the love of all things purple, make sure your email and bank accounts require cell phone sms code based authentications.
I think you've misunderstood.

He meant that his mailbox was open when the person got in via TeamViewer so had access to his inbox.
 
I just wish PayPal would introduce 2 factor auth.

This, This and soooooo much this, Also ditto for Team Viewer.

I wish they would disable that 6 letter generated password or at least make it 10+ long by default.

Edit: I know you can change it but it should force 10+ the moment you leave it unattended cause the default 6 is so easy to crack and so few people change that
 
Last edited:
Top
Sign up to the MyBroadband newsletter
X