My computer was compromised through team viewer this weekend

[AfricanTech]

"Click on My Computer"
"How the hell am I supposed to reach your computer?"

"No, no, My Computer on your desktop"
"your computer is on your desk, not mine..?"

- jy ken daai ding...

 

[AfricanTech]

Lies, Rumors and vicious speculation

@AfricanTech, there's a tradeoff between easy to use, easy to setup and security. Essentially you are handing the keys to your house to your local neighbourhood security firm. While it is in their best interest to keep you safe, it cannot be assured because they are not as invested in your security as you are.

Personally, I'm getting a small dual nic NUC/Mini-itx/micro serverto run pfsense on, for which there is oodles of supporting documentation and how to guides. With Dynamic DNS registration, creating a VPN into your home is as easy as pie.
Heck, you can even generate certificates on the firewall with which to authenticate your device(s) for VPN access. (Just use 2048bit or larger)

This is the best halfway for me, as it is easy to setup but I am also personally invested in keeping it and myself safe.

*Edit*
You don't even need VNC or any other product then. Just simple old Windows Remote Desktop will do.

Absolutely!

When you get your "easy as pie" solution up and running, you would be doing me (and the wider community) a huge service if you then documented what needs to be done in a step by step idiots guide.



PS: I know you can do a VPN setup on the MikroTik RB2011 (which is what I have) but I'm really not sure that I'm up to rooting around and figuring out how to do it (unless I had a straightforward step by step guide)

 

[Sinbad]

Absolutely!

When you get your "easy as pie" solution up and running, you would be doing me (and the wider community) a huge service if you then documented what needs to be done in a step by step idiots guide.



PS: I know you can do a VPN setup on the MikroTik RB2011 (which is what I have) but I'm really not sure that I'm up to rooting around and figuring out how to do it (unless I had a straightforward step by step guide)

RouterOS doesn't support OpenVPN2 yet. It's coming in rOS v7... Until then I wouldn't try setting it up on the mikrotik unless you want to fight with l2tp or pptp

 

[DMNknight]

Absolutely!

When you get your "easy as pie" solution up and running, you would be doing me (and the wider community) a huge service if you then documented what needs to be done in a step by step idiots guide.

I get the feeling I've been volunteered for something :/

 

[AfricanTech]

RouterOS doesn't support OpenVPN2 yet. It's coming in rOS v7... Until then I wouldn't try setting it up on the mikrotik unless you want to fight with l2tp or pptp

/closes the five "how to setup vpn on Mikrotik" firefox tabs

I did manage to note that all the guides in the tabs above referred to "pptp"

I get the feeling I've been volunteered for something :/

 

[AfricanTech]

I have a Raspberry Pi lying around - maybe I'll explore that route in the meanwhile

 

[shadow_man]

Not sure if this has been posted yet, but you're not the only one.

https://www.lowendtalk.com/discussi...already-been-stolen-from-several-users#latest

 

[|Blunt]

Yea, i found many articles as well as a few articles were posted by mybb users regarding this exact thing
TeamViewer stance is still the same and blaming the end user. Its ridiculous imo - Clearly a vulnerability has been exploited in their software
Admitting to it would cost them big time, so i guess its why they are just plain denying it

I wont use TeamViewer again

 

[waynehooper]

I have done the same. Have removed TeamViewer from all the computers I need to remotely access and have setup VNC instead.

If I need to use TeamViewer, I will install it and remove it immediately afterwards until I am happy they have sorted out their sh#t..

Yea, i found many articles as well as a few articles were posted by mybb users regarding this exact thing
TeamViewer stance is still the same and blaming the end user. Its ridiculous imo - Clearly a vulnerability has been exploited in their software
Admitting to it would cost them big time, so i guess its why they are just plain denying it

I wont use TeamViewer again

 

[d7e7r7]

I just enabled 2 step authentication, thanks for the heads up.

 

[D tj]

Have also removed TeamViewer.

 

[BlindMelonChitlin]

Enable the trusted devices feature

http://thehackernews.com/2016/06/teamviewer-hacked-security.html?m=1

Yes, team viewer has been compromised recently.

 

[JJ101]

Scary stuff man!

 

[mercurial]

Uninstalled.

 

[genetic]

Uninstalled.

Why? Just use 2 stage authentication.

 

[mercurial]

Why? Just use 2 stage authentication.

Will wait until the storm dies down before I use it again.

TeamViewer confirms number of hacked user accounts is “significant”

 

[shadow_man]

I'm using this as a replacement.

http://guacamole.incubator.apache.org/

Does SSH / VNC / RDP all over HTML5 - which is great if you need to access your machines and you're behind a locked down network.

 

[sand_man]

Teamviewer not working for me this morning. Anyone else? I can connect to my account but cannot access any of the computers remotely.

 

[AfricanTech]

Teamviewer not working for me this morning. Anyone else? I can connect to my account but cannot access any of the computers remotely.

No problems here. Just logged into my home media PC.

 

[[OUPA]MrNutz]

Not working for me either since early this morning - corporate environment.....V11