TeamViewer 15.46.7 (Premium / Free / Enterprise) for ios download free

While a specific sample seen by Huntress wasn't located, another sample detected as LockBit Black surfaced on VirusTotal, potentially created by a different ransomware group using the same leaked builder.

Indications suggest that the attacks through TeamViewer involve the password-protected LockBit 3 DLL, possibly created by a ransomware gang utilizing the leaked builder. The leaked builder allows the creation of different encryptor versions, including an executable, a DLL, and an encrypted DLL requiring a password for proper launch. The second, monitored less frequently since 2018, experienced antivirus intervention, preventing successful payload execution attempts.Īlthough Huntress couldn't definitively attribute the attacks to known ransomware groups, the modus operandi resembled LockBit encryptors created with the leaked LockBit Black builder from 2022. The first compromised endpoint, actively used by staff for legitimate administrative tasks, saw a contained ransomware attempt. Log file analysis revealed connections from the same source in both cases, suggesting a common attacker. TeamViewer attributed the unauthorized access to credential stuffing, exploiting leaked user credentials rather than a zero-day vulnerability.Ī recent report from Huntress indicates that cybercriminals continue to utilize these tactics, compromising devices via TeamViewer to attempt ransomware deployment. This method was previously reported in March 2016 when victims confirmed their devices were compromised through TeamViewer to encrypt files with the Surprise ransomware. TeamViewer, a legitimate remote access tool widely used in the enterprise sector for its simplicity and capabilities, has unfortunately become a favored tool for scammers and ransomware actors seeking access to remote desktops for the execution of malicious files. Ransomware operators have once again turned to TeamViewer as a means of initiating access to organizational endpoints, attempting to deploy encryptors based on the leaked LockBit ransomware builder.

TeamViewer 15.46.7 (Premium / Free / Enterprise) for ios download free