• Fake Zoom meeting “update” silently installs surveillance software A fake Zoom meeting website is silently pushing surveillance software onto Windows machines. • Visitors land on a convincing imitation of a Zoom video call. • Moments later, an automatic “Update Available” countdown downloads a malicious installer-without asking for permission. • The software being installed is a covert build of Teramind, a commercial monitoring tool companies use to record what employees do on work computers. • In this campaign, it is being quietly dropped onto the machines of ordinary people who thought they were joining a meeting. • You clicked a Zoom link but there was no meeting The whole operation starts at uswebzoomus[.]com/zoom/, a website that opens as a Zoom waiting room.

Article Summaries:

  • A phishing campaign uses a spoofed Zoom‑style web page that pretends to be a waiting room. When a visitor clicks the link, the page loads a broken call with fake participants and a “Network Issue” banner. Ten seconds later an “Update Available” prompt appears, and without any user consent the browser silently downloads a Windows installer named “zoom_agent_x64_s-i(__… ) .msi.” The file contains a covert build of Teramind, a commercial employee‑monitoring tool, pre‑configured to report to an attacker‑controlled server. The installation runs via Windows Installer with no interactive interface, leaving the victim’s machine compromised while they believe they are simply installing a Zoom update.
  • A fake Zoom meeting website is silently pushing surveillance software onto Windows machines. Visitors land on a convincing imitation of a Zoom video call. Moments later, an automatic “Update Available” countdown downloads a malicious installer-without asking for permission. The software being installed is a covert build of Teramind, a commercial monitoring tool companies use to record what employees do on work computers. In this campaign, it is being quietly dropped onto the machines of ordinary people who thought they were joining a meeting. You clicked a Zoom link but there was no meeting Th

Sources: