Fake ZOOM Installers Embed Spyware

Since the first containment measures, ZOOM quickly established itself as an essential element of work environments.

Despite some slowdown in recent months, video conferencing software is still very popular, and some hackers continue to exploit its popularity.

Fake ZOOM installers!

For more than two years now, many employees have become acquainted with Meet, ZOOM or even Teams, work tools allowing remote collaboration. Despite a return to normal, many businesses still include remote workers, or people working in different geographies.

Also, software like ZOOM is still very popular, and it’s no surprise that hackers are also trying to take advantage of the software’s success in their own way.

Vidar Stealer malware on fake ZOOM sites

Thus, a new campaign highlighted by @idclicktaht on Twitter aims to encourage Internet users to download onto their computer what appears to be a ZOOM installation utility (“zoom.exe”), from a site that is altogether ” official “. The reality is quite different, since the latter also hosts spyware, which is responsible for siphoning the victim’s personal information.

The spyware in question is called Vidar Stealer, a program that will notably steal personal data, but also passwords, IP addresses or even banking information.

In total, no less than six fraudulent websites, resuming the exact appearance of the ZOOM site, have been spotted in recent weeks, but are no longer accessible.

The specialized platform Malwarebytes undertakes to recall: Before downloading files that claim to be legit, it is worth doing a quick search online to find the software’s official website. “. Distrust, therefore.

Source : Malwarebytes Labs