Silas Cutler (P1nk)

@silascutler I used to work for one of the major banks; VNC is a commonly used tool for support to update/manage ATMs, which run on Windows

@silascutler so, prob legit. that screen shouldn't have shown up, but it's prob not a cause for concern (unless that bank doesn't use VNC)

@ranatalus sure, could be a legit install. I really don't like seeing the anonymous user ( especially because real VNC supports ldap )

@ranatalus I'd also wager it's an unnecessary tool at this point. Microsoft's suite is more then capable of proper mgmt.

@ranatalus VNC seems like an easy way to cause these systems to end up with wildly different settings, patch levels, configurations, etc.

@silascutler sure, other software could be used, but business is slow to pivot and doesn't want to waste paid-for licenses.

@silascutler That's horrifying. Where was this?

@silascutler This ATM vendor could optimise their configuration to avoid the “anonymous” reference or use our SDK for better integration

@silascutler @hexa_de you cannot intercept pin entry, can you?

@simonszu @hexa_de depends. I'd the keypad is a HID device it's simple keyboard hooking

@silascutler Really hoping this is Photoshop

@drdavidjday Nada.