In fact, these web pages can also be used for phishing purposes.

They are usually disguised as the 'official' Zoom site or as 'trustworthy' third party sites, from which users can supposedly download the Zoom app (thereby, tricking them into downloading malicious content). resembling the domain of the genuine website as closely as possible).

It has been noted that the name of the Zoom service/application was misused to proliferate Neshta information-stealing malware.Īdditionally, there has been an increase of domains registered incorporating 'Zoom' within them (e.g. They might be adware, browser hijackers or other PUAs, as well as Trojans, ransomware, cryptominers or other malware. The proliferated programs are varied, depending on the criminals' modus operandi and goals. InstallCore then installs an unwanted or malicious piece of software. These executables typically launch the InstallCore installer, which is a Potentially Unwanted Application (PUA). The executable files of these rogue installers are often named with variations of ' zoom-us-zoom_*******.exe' (the asterisks represent differing words and/or characters). Zoom Video Communications is a legitimate conferencing service, providing a cloud-based communication platform that enables people to have audio and video conferences, online meetings and exchange messages via chat.ĭue to Zoom's accessibility (cross-platform, basic plans available free, etc.) and the current social climate ( Coronavirus/COVID-19 pandemic), cyber criminals have begun misusing the company/product name to further their malicious purposes.Īs Zoom's user base has grown exponentially with the influx of remote workers/students, so has cyber crime targeting this service/app.ĭuring research, it has been observed that cyber criminals spread malicious content using fake Zoom app installers. 'Zoom virus' is a generic term used to define unwanted or malicious software proliferated under the guise of content relating to the Zoom application/services.

Fake zoom link