Key points:
Hackers are utilising Zoom to infect consumers' devices with malware and spyware.
The new threat starts with a simple message that exposes their device to danger.
The threat was found by Google's Project Zero's security experts.
Zoom is one of the most popular meeting platforms used by most businesses and individuals throughout the world. Despite many data leaks and other difficulties, this is the case. According to the current revelation, hackers are utilising Zoom to plant malware and spyware on customers' devices. The new threat starts with a simple message that exposes their device to danger. The security experts at Google's Project Zero were the ones who uncovered it.
The new Zoom threat is built in such a way that hackers send a specifically prepared and compromised message to unwitting victims. Hackers will be able to install harmful code on the victim's device and launch spyware and malware attacks as a result of this.
Malware attack against Zoom
Hackers are infecting victims' computers with malware using the Zoom video platform. The most concerning aspect of the issue is that it does not necessitate users interacting with online scammers. Hackers simply need to install malware and spyware on your devices, whether they be Android, iPhone, Windows, or anything else. Ivan Fratic, a vulnerability researcher at Google Project Zero, brought this up.
"This research explains how a bad individual can use Zoom chat to exploit another user." A successful assault does not necessitate user interaction. "All an attacker needs is the ability to send messages to the victim using Zoom chat using the XMPP protocol," Fratic explained.
How do you get away from the Zoom threat?
This threat has been classified as a 'high' severity threat by Zoom. Zoom has given it an 8.1 out of ten score using the Common Vulnerability Scoring System (CVSS) model. All compatible platforms, including Windows, macOS, Android, iPhone, and others, will be affected. This is a significant issue.
All Zoom clients should download the most recent version V5.10.0 and avoid clicking any fraudulent websites or SMS messages.
