Beware: Hackers can use Zoom to Steal Users’ Windows Credentials

Because of Covid-19 outbreak the entire world is under a complete lockdown. Companies are asking the employees to work from home. Employees of most of the small and big organizations have adapted work from home.

The communication between the employees and the meetings are happening via various platforms. Consequently, the WFH has led to a boost in the downloads of video conferencing apps across the globe. Employers, Managers, and employees can use the Video Conferencing app to meet with others virtually.

They stay in touch with each other, and employers can pass on the information to the employees via Video conferencing.

One of the most popular apps for such meetings is Skype. It is used worldwide by the companies and employees for conducting meetings from remote locations.

However, there is another app named Zoom, which is gaining popularity among the professionals who are working from home.

Zoom app is easy to use, just like other video calling apps, including Skype, Google Duo, and FaceTime. The app not only works on Android, iOS, Windows, and Mac platforms, but it is also compatible with the web browsers. Millions of people working from home are relying on Zoom to connect with co-workers, customers, and partners.

The demand for Zoom app has increased multifold, but Zoom has also become a target for wrongdoers and potential hackers

Zoom app is vulnerable to cyber attacks

According to the security researchers, there are some underlying vulnerabilities in the Zoom app. In a recent report, two security researchers have claimed that they have found a security loophole in the Zoom app. It is of great concern as it can give attackers access to Windows passwords.
In addition to that, the flaws in the app can be used to gain access to a user's Mac and tap into its webcam and microphone, claimed another researcher.

The attacker can gain access to the computer once exploited and install malware or spyware, without letting users know about the backdoor entry. The issue that allows unwanted access is due to the installer that can quickly be injected with malicious code and used to obtain root-level user privileges.

Patrick Wardle, a former NSA hacker who works with Jamf, an Apple enterprise management software firm, revealed the bugs on his blog, first reported by TechCrunch.

Therefore Zoom app has raised many concerns among the employers and employees who are working from home. No company would like their sensitive information to be compromised.
Computer Emergency Response Team of India (CERT-In) has also warned the Zoom users in India. It said that unguarded usage of the app could be vulnerable to cyber attacks, including leakage of sensitive office information to cybercriminals.

"At Zoom, ensuring the privacy and security of our users and their data is paramount. We are aware of the UNC issue and are working to address it." – Zoom Representative

Tips to Reduce Risks on Zoom meetings

The meeting manager can make the participants to use a password. The manager can also make the participants first appear in the waiting room and then admit them individually. Avoid making the meeting public.

Once everybody has joined the meeting, the host can lock the door and close the entry to newcomers. It can be done by clicking the Participants tab at the bottom of the Zoom window, and then choosing the Lock option.

Avoid sharing the links to your meeting on social media. The best way is to email or text them directly to participants.

Limited access to screen sharing will also prevent you from the risk of losing your data to hackers.

The host also has the option to disable the ability to text chat during the session to prevent the delivery of unwanted messages.

Make sure that all the participants have the latest version of Zoom's software