Cybercriminals are setting up numerous fake Zoom domains to try and take advantage of users who want to use the videoconferencing tool to connect with friends, family, and colleagues during the ongoing COVID-19 crisis.
Researchers from Check Point said they have observed a sharp increase in domains with the name "Zoom" in them over the past several weeks. Since January, more than 1,700 new Zoom-themed domains have been registered worldwide. More than 400 of them were registered just in the past week alone. Many of them were legitimately registered by companies with similar names or were used in domains with relevant content.
But of the Zoom domains that have been registered since January, at least 70 appear suspicious. That conclusion is based on when and who registered it, the IP address on which it resides, the files it is related to, how many accesses it has, and other factors, says Omer Dembinsky, data research team leader at Check Point. "In certain cases we have visibility to the actual attacks, but we can know about a suspicious website even before it is used in an active attack," Dembinsky says.
Zoom is among the most targeted apps, but it is not the only videoconferencing or communications app that attackers have targeted in COVID-19 related phishing and other scams in recent weeks. According to Check Point, new phishing websites have been detected for virtually every other leading communications apps as well including classroom.google.com.
The goal in creating these spoofed sites typically is to trick users who are lured there into parting with account credentials or into ..
Support the originator by clicking the read the rest link below.
