Tootfinder

As I continue to slowly roll out Trixie to more of my fleet: my first virtual desktop VM (my mail client system) to be upgraded works fine for a while, then randomly seems to lock the screen and blank my VNC session after a few minutes of inactivity.
If I log into the VM console from the hypervisor UI and unlock, the VNC comes back.
Wonder what's up there...

Can't tell from the article if this attack was sophisticated, or some open VNC for the controls had been indexed by Shodan or something.
https://www.theguardian.com/world/2025/aug/14/russian-hackers-control-norwegian-dam-norway