• Fake Zoom meeting “update” silently installs rogue version of monitoring tool abused by cybercriminals to spy on victims UPDATE (February 25, 2026): Teramind has stated that it is not affiliated with the threat actors described and did not authorize the deployment of the software referenced • Further updates have been made throughout for clarification • A fake Zoom meeting website is silently pushing surveillance software onto Windows machines • Visitors land on a convincing imitation of a Zoom video call • Moments later, an automatic “Update Available” countdown downloads a malicious installer-without asking for permission • The software being installed is a malicious and rogue version of Teramind, a legitimate product and commercial workforce monitoring solution companies use to record what employees do on work computers

Article Summaries:

  • UPDATE (February 25, 2026): Teramind has stated that it is not affiliated with the threat actors described and did not authorize the deployment of the software referenced. Further updates have been made throughout for clarification. A fake Zoom meeting website is silently pushing surveillance software onto Windows machines. Visitors land on a convincing imitation of a Zoom video call. Moments later, an automatic “Update Available” countdown downloads a malicious installer-without asking for permission. The software being installed is a malicious and rogue version of Teramind, a legitimate prod

Sources: