The “Security Spotlight” blog series provides insight into emerging cyberthreats and shares tips for how you can leverage LogRhythm’s security tools, services, and out-of-the-box content to defend against attacks.
In this Security Spotlight, we’ll be talking about monitoring Virtual Network Computing for misuse (MITRE Technique T1021.005).
What is Virtual Network Computing (VNC)?
VNC is a platform-independent desktop sharing system that enables individuals to remotely control another computer via the Remote Frame Buffer protocol (RFB) over a network connection. While similar to the Remote Desktop Protocol (RDP), this system utilizes a more focused scope compared to the RDP’s full resource-sharing approach. It is important to note that, by default, VNC uses system credentials for authentication.
VNC is a popular choice for providing remote technical support, especially as we increasingly shift towards a permanent working model. While originally developed by a research lab in Cambridge, VNC’s open source code has allowed for a number of variants to be developed, optimizing the tool for specific use cases...Read More!
