TeamSpy_Crew__2013__theteamspystory_final_t2.pdf

A comprehensive threat intelligence report detailing the TeamSpy cyberespionage campaign that abused TeamViewer as a remote-access foothold, combining signed TeamViewer components with custom surveillance modules to infect government and private sector targets across CIS and Eastern Europe, maintain covert command-and-control infrastructure using multiple domains, harvest information from hosts, including system data and keystrokes, and exfiltrate data via a network of compromised servers; the report documents toolsets, infrastructure, victim statistics, and defensive implications.