And it's unlikely an attack like this would have worked against other utilities either, according to experts. Either way, the good news is that the water utility caught the intrusion, which wasn't as subtle as it could have been. There's still a lot we don't know about the hack of the City of Oldsmar's water treatment system, and the details of how the hacker took control will be the key in knowing how much the water utility was responsible for not securing its systems. 'Someone either chose to do this for convenience with knowledge of the risks or they were ignorant of the risk and thought it wouldn’t be found (or that it was secure enough in this configuration).' Allowing weak controls on remote access to critical systems is the issue,' Miller added. Then you SSH tunnel into the machine for access to the local 5900 port.'This is an education or attitude problem. If you need an alternative, use Chrome Remote or (although more of an hassle) you can install Cygwin SSH server + TightVNC server, where you configure TightVNC to accept only localhost connetions. Had to close this to be able to delete the file and folder.ĪFAIK, this is a legitimate Intel Graphics (i945) system tray process, so why on earth would it be creating temporary files on teamviewer's directory? I will investigate more if this is indeed something that the driver in question runs, as more recent Intel drivers on an 'Ivy Bridge' processor does not run this 'igfxsrvc' process. Found a process 'igfxsrvc.exe' had the temp file on Teamviewer's directory still open. Then I tried to delete the folder but a temp file was open still. Then, I found the temp dir it extracted to and opened the window to close it.

It kept running with no indication other than on the task manager process list (this is bad enough already). I've just run it on a computer in 'run only', from a setup file, with no admin permissions.

I'm starting to think something very wrong is going on with this software.

Is teamviewer safe to use again