Still, these tricks are surprisingly easy to fall for, and ironically the people most at risk for getting tricked are the ones who are the most confident that they're safe.
Or as CRIL puts it, identify “the legitimacy of the source before downloading any executables.” Luckily, staying safe from this scam is relatively easy: Don't download Zoom unless you're positive it's from the official website. Meanwhile, the malware will go undetected, siphoning off personal data. In other words, the victims won't realize they've been tricked, because they'll actually still get the software they wanted. ZOOMIN~1.EXE is a clean file that launches the legitimate Zoom installer.” Microsoft Build Engine (MSBuild) is a platform used to build applications. NET binary that injects the malicious stealer code into MSBuild.exe. Once executed, researchers found, two files are downloaded: ZOOMIN~1.EXE and Decoder.exe. Victims Will Still Download Zoom - But They'll Also Get Malware And since the official Zoom URL - uses a “.us” domain rather than the more common “.com,” it's already slightly unusual, meaning that the fake URLs don't stand out quite as much.Īny users who stumble on one of these fake websites while trying to download Zoom won't see anything out of place if they don't look too closely at the URL. The fake websites are designed to replicate the Zoom software's home page, complete with the same designs, colors, and friendly orange “Sign up, it's free” button to encourage new users. This might go without saying, but please don't visit those URLs: The report is out from the cybersecurity firm Cyble's Research and Intelligence Lab (CRIL).Ī tweet from an internet fraud watchdog listed the URLs of six different but similar malicious websites, and it's what first kicked off the CRIL investigation. Fake Zoom Websites Look Like the Real Deal
Vidar Stealer is designed to steal information off the devices it's downloaded to, giving bad actors a backdoor into accessing anything from bank account logins to passwords or crypto-wallets.
Think twice before downloading Zoom online: Multiple fake sites are popping up claiming to offer free downloads of the popular video conferencing software, only to trick people into downloading malware instead.Ĭybersecurity experts are ringing the warning bell on these fraudulent Zoom websites, all of which use the same malicious software, called “Vidar Stealer.”
0 kommentar(er)
