Researchers: Zoom’s Videoconferencing Software Lets Attackers Send Network Links to Steal Windows Credentials

[Tsing]

Image: Zoom



With COVID-19 locking workers at home, Zoom’s videoconferencing software is seeing a tremendous surge in usage and popularity, but it’s led to some serious scrutiny that isn’t working in the platform’s favor. Following allegations of data sharing, researchers now claim that Zoom has a security bug that lets attackers steal Windows logins and passwords.



This revolves around the fact that Zoom lets users paste UNC (Universal Naming Convention) paths into a chat window (e.g., \evil.server.com\images\cat.jpg), which are then automatically translated into clickable links. According to Bleeping Computer – which...

Continue reading...