Evans Dai (M83071) wrote:
> The event lasted more than a minute. The mouse cursor movement was nonrandom with boxes being opened on the toolbar & intentional movements across screen.
SOunds convincing.
> The machine has VNC (but not logmein) configured for access by supplier & local HIS
One of them has Storm worm on one of their machines, perhaps?
Or the laptop with the development copy of the password database got
lost in Ohio.
I suggest configuring your firewall to permit VNC (ports) access from a
list of IP addresses rather than everywhere.
|