Troj/Baley-A is a Trojan that can be used to steal passwords from other users of the Eyeball chat service. It also provides a backdoor for a remote attacker.
The Trojan comes in a package with several other files. One of the files, crack.txt, includes a long list of words that can be used in a dictionary attack on other users' accounts.
Troj/Baley-A is a Trojan that can be used to steal passwords from other users of the Eyeball chat service. It also provides a backdoor for a remote attacker.
The Trojan comes in a package with several other files, one of them, crack.txt includes a long list of words that is used in a dictionary attack on other users' accounts.
When the Trojan is run, it attempts to connect to port 5515 of the Eyeball chat server where it can be used as an automated client.
Troj/Baley-A listens for commands on TCP ports 1979 and 1980. The remote attacker is able to control the Trojan and send commands that execute on the local computer. The most destructive command attempts to delete system file C:\NTLDR and make the system unbootable.