TeamViewer identifies a security breach attributed to Russian cybercriminals Midnight Blizzard

TeamViewer has identified a cyberattack linked to its employees’ account credentials, attributed to the Russian cybercriminal group Midnight Blizzard, although, at this time, there is no evidence that it affected the product environment or customer data.

TeamViewer is a ‘software’ that allows remote access to equipment, such as computers, to control them and provide remote support. In this sense, it is a platform commonly used in business environments.

The company has shared that last Wednesday, June 26, its security team detected an irregularity in TeamViewer’s internal corporate computing environment and that they immediately activated their response team and investigation procedures to “implement the necessary corrective measures.”

After further investigation with other “world-leading” cybersecurity experts, the company has now concluded that this is a cybersecurity attack linked to the credentials of an employee account within the corporate IT environment.

This was stated by TeamViewer in a statement on its website, in which it also detailed that, together with its external incident response support, it has attributed the malicious activity to the malicious actor known as APT29 or Midnight Blizzard.

Specifically, as has been revealed in investigations into cyberattacks on other entities by the same malicious actor, this is a Russian cybercriminal group that acts with the support of the government, since they work as spies for Russian intelligence.

In this regard, TeamViewer has detailed that, according to the current findings of the investigation, the attack was contained within the corporate environment, so there is no evidence that cybercriminals have gained access to the product environment or customer data.

Likewise, the company has stressed that they keep all servers, networks and accounts “strictly separated” to, in the context of these attacks, “help prevent unauthorized access and lateral movement between different environments,” as it explained.

TeamViewer concluded by highlighting the importance it attaches to the security of its customers, and has assured that it will maintain “transparent communication” with the parties involved in the incident. It will continue to update the status of its investigations in its Trust Center.