Zoom attack tricks victims into allowing remote access to install malware and steal money
Be careful when talking to people you’ve not met with before over the Zoom video conferencing system; you might get more than you bargained for. Two CEOs were recently targeted by a Zoom-based attack. One spotted it in time – and sadly, one did not.
ELUSIVE COMET targets its victims by luring them into a Zoom video call and then taking over their PC to install malware, infiltrate their accounts, and steal their assets.
The attack is by a crime group that the Security Alliance call ELUSIVE COMET in a warning about the threat last month.
The group typically approaches victims with a supposed media opportunity to get them interested, and then sets up an introductory Zoom call. During that video meeting, the attacker keeps their screen switched off, but sends a remote control request to the victim.
https://www.malwarebytes.com/blog/news/2025/04/zoom-attack-tricks-victims-into-allowing-remote-access-to-install-malware-and-steal-money?utm_source=iterable&utm_medium=email&utm_campaign=b2c_pro_oth_20250428_aprilweeklynewsletter_paid_v4_1_174551916671&utm_content=Zoom