Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

FireEye confirms APT41 hacked TeamViewer, may have accessed billions of devices

twitter.com

Post reply on HN
Print view View original

51–60 of 76 posts

Re: FireEye confirms APT41 hacked TeamViewer, may have accessed billions of devices

#51

Post by tmikaeld »

kuon wrote: post #21

Speaking of TeamViewer, do you know a good open source alternative that I can self host (I mean self host the relay server for NAT traversal). That is as easy to use? Works on windows, mac and linux? It should also be installable in a few slick with no network configuration required.

https://www.meshcommander.com/meshcentral2

Seems to do this (currently in beta)

Re: FireEye confirms APT41 hacked TeamViewer, may have accessed billions of devices

#53

Post by dang »

miles wrote: post #7

The article should've linked to this tweet[0] by the same researcher instead: > "APT41 compromised company behind TeamViewer - which enabled them to access any system with TeamViewer installed" [0] https://twitter.com/cglyer/status/1182413194360508419

Ok, we changed the URL to that from https://www.securitynewspaper.com/2019/10/14/fireeye-confirm.... Thanks!

Re: FireEye confirms APT41 hacked TeamViewer, may have accessed billions of devices

#54

Post by aasasd »

ddtaylor wrote: post #46
geoah wrote: post #45

Earlier quoted context omitted.

There is a more official statement from TV as well. https://community.teamviewer.com/t5/Announcements/FireEye-cl...

> TeamViewer is safe to use How often has that been true? TV has been hacked more than once AFAIK.

Just as safe as it always was! \(^O^)/

Re: FireEye confirms APT41 hacked TeamViewer, may have accessed billions of devices

#55

Post by philliphaydon »

spullara wrote: post #30
kuon wrote: post #21

Speaking of TeamViewer, do you know a good open source alternative that I can self host (I mean self host the relay server for NAT traversal). That is as easy to use? Works on windows, mac and linux? It should also be installable in a few slick with no network configuration required.

Not OSS but remotedesktop.google.com works well.

It sucks for multi monitor setups though, keyboard events, defocuses for no reason, unlocks the computer you rdp into, doesn't support scaling monitors.

Re: FireEye confirms APT41 hacked TeamViewer, may have accessed billions of devices

#56

Post by egeozcan »

ddtaylor wrote: post #46
geoah wrote: post #45

Earlier quoted context omitted.

There is a more official statement from TV as well. https://community.teamviewer.com/t5/Announcements/FireEye-cl...

> TeamViewer is safe to use How often has that been true? TV has been hacked more than once AFAIK.

TV gives full access to computers through passwords and it seems it's not brute-force resistant. Think about how long an SSH server with password enabled and no autoban would last in the open...

Edit: nevermind, the attack is apparently through some malware.

Re: FireEye confirms APT41 hacked TeamViewer, may have accessed billions of devices

#57

Post by weitzj »

kuon wrote: post #21

Speaking of TeamViewer, do you know a good open source alternative that I can self host (I mean self host the relay server for NAT traversal). That is as easy to use? Works on windows, mac and linux? It should also be installable in a few slick with no network configuration required.

zerotier.com is exactly this. I am still amazed how easy this is. (Big fanboy)

Re: FireEye confirms APT41 hacked TeamViewer, may have accessed billions of devices

#58

Post by pvtmert »

jszymborski wrote: post #22
kuon wrote: post #21

Speaking of TeamViewer, do you know a good open source alternative that I can self host (I mean self host the relay server for NAT traversal). That is as easy to use? Works on windows, mac and linux? It should also be installable in a few slick with no network configuration required.

I haven't tried this, but I imagine a situation where computer A uses SSH to connect to VPS B and computer C connect to VPS B using SSH. If both SSH connections port-forward a VNC port, you can use VNC.

you can also port forward from/to unix sockets

Re: FireEye confirms APT41 hacked TeamViewer, may have accessed billions of devices

#59

Post by twooclock »

kuon wrote: post #21

Speaking of TeamViewer, do you know a good open source alternative that I can self host (I mean self host the relay server for NAT traversal). That is as easy to use? Works on windows, mac and linux? It should also be installable in a few slick with no network configuration required.

Not opensource but works good: https://www.cloudberrylab.com/remote-assistant.aspx

Re: FireEye confirms APT41 hacked TeamViewer, may have accessed billions of devices

#60

Post by vsenko »

kuon wrote: post #21

Speaking of TeamViewer, do you know a good open source alternative that I can self host (I mean self host the relay server for NAT traversal). That is as easy to use? Works on windows, mac and linux? It should also be installable in a few slick with no network configuration required.

In case when remote control capabilities are not required, one could use jitsi (https://jitsi.org) video conferencing service which provides screen sharing capabilities (implementation depends on the web browser).

The main advantage is that there is no need to install any software neither on the remote machine nor on the local one.

There is a cloud hosted free version https://meet.jit.si which does not even require registration.

Post reply on HN