Windows Security Risk in Zoom Chat Function | Avast

Windows Security Risk in Zoom Chat Function | Avast
Avast Security News Team, 3 April 2020

Plus, some governments use cell phone data to track virus carriers and the U.S. considers more Wi-Fi access for all



Researchers discovered a flaw in the Zoom chat feature that could allow attackers to steal users’ Windows login credentials. Over the past month, as much of the population began working from home and discontinuing social gatherings, the number of Zoom video conferences has skyrocketed. Since 2020 began, 2 million new users have signed up with the service. People all over the world are using Zoom on a daily basis for work meetings, school sessions, social hours, and casual video chats. The sudden surge, however, has brought to light several privacy and security issues with Zoom protocol. 
The latest vulnerability puts Zoom users on Windows systems at risk if they use the chat feature to view shared files. Bleeping Computer reported that when users share a file through the Zoom chat, Zoom converts that file to a hyperlink. When other users click that link, they are connected to a remote site to see the file. At the same time, their Windows login name and password are transmitted in the metadata. The password is hashed, but it easily can be cracked by a savvy hacker. Researchers at Bleeping Computer walked through the process and cracked the password within 16 seconds. Zoom has acknowledged the vulnerability and said they are working to address the ..

Support the originator by clicking the read the rest link below.