Skip to content
← All malware

TeamBot

Also known as: FINTEAM

Recently, Check Point researchers spotted a targeted attack against officials within government finance authorities and representatives in several embassies in Europe. The attack, which starts with a malicious attachment disguised as a top secret US document, weaponizes TeamViewer, the popular remote access and desktop sharing software, to gain full control of the infected computer.

This is achieved by sideloading another DLL among the legit TeamViewer.

Last 7 days

Mar 4, 2026
C2 Hosts: 1