VNC (Virtual Network Computing) is one of the most powerful resources any administrator has for remotely controlling a computer… if they know what they're doing. A VNC system deployed without proper security measures means PCs open to the Internet from end to end. VNC Roulette is a new portal that shows screenshots and IP addresses belonging to those computers.
On more than one occasion I've needed to perform remote adjustments using TeamViewer. It's easy to use for both parties and free for personal use, but more advanced users often prefer tools like RealVNC, TightVNC, and other similar products. Remote administration is very useful, but also very dangerous. Establishing basic security measures is not an optional step, yet many people ignore it, just as they leave an open WiFi network, granting web access to anyone passing by. In other words, a computer running a VNC server without minimal protection can be seen by anyone capable of finding it—and that's what brings us to VNC Roulette.
As its name suggests, VNC Roulette is a kind of "ChatRoulette" focused on all those exposed computers, capturing a "screenshot" and the IP address of each one. Some of the things that appeared in this whirlwind of images are downright funny, from a game of Solitaire on Windows XP under a VirtualBox session to a "feedback" system where users can rate the quality of a toilet—but others are a real horror. Among the worst, we found an image with patient information, including birth dates, phone numbers, and physical addresses.
A curious detail is that those interested in accessing VNC Roulette won't be able to. The portal was hacked by the FatalSec group, and it seems it will take a while to get back to normal, although there is a mirror that works without problems (link below). However, that's not the point. A simple search on the Shodan portal for the RFB protocol gives us more than half a million results, and who knows how many of them don't have a password. Cyberattacks are everyday occurrences, but security always starts on our side, and when we come across news like hospitals affected by ransomware, we're really not surprised...
