Zoom bug allows hackers to create fake meetings and deceive users

in #zoom4 years ago

After its users increased dramatically due to the Corona pandemic, Zoom Zoom video calls has addressed many security issues in order to protect the privacy of users.

The popular video meetings app Zoom has not imagined that it will grow from 10 million daily participants in December 2019, to over 300 million active participants in April 2020.

image.png

Therefore, the past period announced that it had been able to fix the loopholes that were threatening users, but apparently, there are still other loopholes that even the video conferencing service knew nothing about.

Security Company Check Point was able to detect a serious security vulnerability that allows hackers to impersonate well-known business accounts for phishing, obtain user credentials, steal sensitive data, and target employees with malware.

The company said, that the hacker can create a regular video meeting link such as https://zoom.us/j/ ########، and then add the name of any company in the beginning so yourcompany.zoom.us/j/##########، video meeting will remain without any problem.

Security experts at Check Point noted that many users can fall victim to this fraud without realizing that the call link is not real.

Experts warned against trying to impersonate an employee of a well-known company and try to talk to you via Zoom in order to infiltrate and steal credentials or even sensitive information.

The security company Chekpoint reported the vulnerability to Zoom app, which immediately fixed it, and it seems that the security vulnerabilities will not end as a new vulnerability emerges every day that makes Zoom users vulnerable to hackers and hackers attacks.