New virus stings Eyeball video chat network

Posted on 7 Feb 2005 at 12:23

Listens in for usernames and passwords and installs a backdoor so that the attacker can access the infected machine

A Trojan that targets a video-conferencing system has been discovered.

Once the virus, known as Baley-A, has infected a system, it connects to a server on the Eyeball video chat network, where it can listen in for usernames and passwords of others on the network.

It also starts up an automated client on the infected machine, and then installs a backdoor so that the attacker can access not only the infected machine, but also use it to connect to Eyeball.

Sophos' senior technology consultant Graham Cluley said that the motive behind Baley-A may simply be voyeurism. He said that this was a common attribute of recent Trojans.

Just weeks ago, the Spanish Civil Guard arrested 37-year-old man en-flagrante: they found him in the act of spying on people through their webcams.

However, it's not just Eyeball users in which Baley-A is interested. The Trojan also uses a list of commonly used passwords to try and break into other user accounts.

And the backdoor can be used to send commands to the infected machine, including deleting essential system files and rendering the machine unbootable.

Author: Matt Whipp

Get more reviews, tutorials and in-depth advice, every month with Computer Shopper.
Click here to try 3 issues for £1

< Previous News : General Next >

Be the first to comment on this article

You need to Login or Register to comment.