spoofing via teamviewer

ceesdk

Hello, i have a computer where a stranger (spoofing) has tried to make damage to the computer or other misbehavior. The owner has given the codes to make contact through teamviewer.

Suddenly the owner realised thats going wrong and did a shut down on his computer, is there anywhere a possibility to see if the session started before he shut down the computer ?

regards,

Cees de Krijger (not the owner)

Justin

Hello @ceesdk,

Thank you for reaching out to us.

I am sorry to hear that you have been contacted in this way. TeamViewer strongly condemns any criminal activity, and we are appalled by the behavior of such people and their actions towards TeamViewer users.

I'll have an article for you on how to read the log files:

https://community.teamviewer.com/English/kb/articles/108789-log-file-reading-incoming-connection

I'm not sure what code he gave out, if it was a password set by himself or the randomly generated one. Either way, I'd like you to disconnect the internet connection while trying to read the log files, just to be on the safe side.

It should randomly generate a new password, but you can do that on your own as well, or set up a personal password after.

Next up, if he established a connection, make sure to add him to the Blocklist, here is how:

https://community.teamviewer.com/English/kb/articles/29739-block-and-allowlist

This one might have a couple useful tips to check out:

https://community.teamviewer.com/English/discussion/109948/what-to-do-after-a-scammer-attack

I would invite you to report your incident to us on our “Report a scam” page and our security team will have a look.

You can find that form right here: https://www.teamviewer.com/report-a-scam/

Let me know if you have further questions.

Best,

Justin