zoom phone

Video Conferencing Software Zoom Faces Scrutiny Over Hacks, Abusive Behavior During Meetings

The spread of “Zoombombing,” or hijacking a meeting room with abusive images or speech, has grown in scope as more Americans turn to teleconferencing for classroom instruction and workplace meetings.

As more Americans use video conferencing software to connect with coworkers, friends and family during the COVID-19 pandemic, one of the most popular platforms, Zoom, has faced several complaints from customers who have had their conferences “hijacked” by hackers.

The practice, also referred to as “Zoombombing,” has happened with several virtual classrooms and workplace meetings that did not have password protections for the meeting room and had their meeting room links available online.

The FBI’s Boston office issued a warning this week about the potential for hijacking after receiving several reports of “conferences being disrupted by pornographic and/or hate images and threatening language.”

One school in Massachusetts reported an incident where an unidentified individual dialed into the classroom, yelled a profanity and shared the teacher’s home address in the middle of the meeting. Another teacher reported that an unidentified individual appeared in their Zoom meeting room with visible swastika tattoos.

“As individuals continue the transition to online lessons and meetings, the FBI recommends exercising due diligence and caution in your cybersecurity effort,” the warning reads.

In a press statement, Zoom has said that it takes the security of its software seriously and that employees are “deeply upset” to hear about these types of attacks.

“For those hosting large, public group meetings, we strongly encourage hosts to review their settings and confirm that only the host can share their screen,” the company, which has faced criticism for cybersecurity issues in the past, said. “For those hosting private meetings, password protections are on by default and we recommend that users keep those protections on to prevent uninvited users from joining.”

The questions around Zoom’s cybersecurity practices and use of personal data have been escalated by Sen. Richard Blumenthal (D-Conn.). The senator sent a letter to Zoom CEO Eric Yuan on Tuesday to seek information on Zoom’s protections against security threats and “abuse” of its services.

“The millions of Americans now unexpectedly attending school, celebrating birthdays, seeking medical help, and sharing evening drinks with friends over Zoom during the Coronavirus pandemic should not have to add privacy and cybersecurity fears to their ever-growing list of worries,” Blumenthal wrote.

New York Attorney General Letitia James sent a similar letter this week. Blumenthal has requested answers to his questions, which include inquiries about Zoom’s collection of personal data, use of “end-to-end encryption,” and policies against abusive behavior, by April 14.

In the meantime, users can report incidents of Zoombombing to the company so staff can take “appropriate action,” the company said. Victims of teleconference hijacking or any cyber crime can report it to the FBI’s Internet Crime Complaint Center. The FBI offered other tips on preventing Zoombombing, including not sharing links to meeting rooms on unrestricted social media posts where trolls and hackers can find them.

About the Author

Haley Samsel is an Associate Content Editor for the Infrastructure Solutions Group at 1105 Media.

Featured

  • Maximizing Your Security Budget This Year

    Perimeter Security Standards for Multi-Site Businesses

    When you run or own a business that has multiple locations, it is important to set clear perimeter security standards. By doing this, it allows you to assess and mitigate any potential threats or risks at each site or location efficiently and effectively. Read Now

  • New Research Shows a Continuing Increase in Ransomware Victims

    GuidePoint Security recently announced the release of GuidePoint Research and Intelligence Team’s (GRIT) Q1 2024 Ransomware Report. In addition to revealing a nearly 20% year-over-year increase in the number of ransomware victims, the GRIT Q1 2024 Ransomware Report observes major shifts in the behavioral patterns of ransomware groups following law enforcement activity – including the continued targeting of previously “off-limits” organizations and industries, such as emergency hospitals. Read Now

  • OpenAI's GPT-4 Is Capable of Autonomously Exploiting Zero-Day Vulnerabilities

    According to a new study from four computer scientists at the University of Illinois Urbana-Champaign, OpenAI’s paid chatbot, GPT-4, is capable of autonomously exploiting zero-day vulnerabilities without any human assistance. Read Now

  • Getting in Someone’s Face

    There was a time, not so long ago, when the tradeshow industry must have thought COVID-19 might wipe out face-to-face meetings. It sure seemed that way about three years ago. Read Now

    • Industry Events
    • ISC West

Featured Cybersecurity

Webinars

New Products

  • Luma x20

    Luma x20

    Snap One has announced its popular Luma x20 family of surveillance products now offers even greater security and privacy for home and business owners across the globe by giving them full control over integrators’ system access to view live and recorded video. According to Snap One Product Manager Derek Webb, the new “customer handoff” feature provides enhanced user control after initial installation, allowing the owners to have total privacy while also making it easy to reinstate integrator access when maintenance or assistance is required. This new feature is now available to all Luma x20 users globally. “The Luma x20 family of surveillance solutions provides excellent image and audio capture, and with the new customer handoff feature, it now offers absolute privacy for camera feeds and recordings,” Webb said. “With notifications and integrator access controlled through the powerful OvrC remote system management platform, it’s easy for integrators to give their clients full control of their footage and then to get temporary access from the client for any troubleshooting needs.” 3

  • Camden CV-7600 High Security Card Readers

    Camden CV-7600 High Security Card Readers

    Camden Door Controls has relaunched its CV-7600 card readers in response to growing market demand for a more secure alternative to standard proximity credentials that can be easily cloned. CV-7600 readers support MIFARE DESFire EV1 & EV2 encryption technology credentials, making them virtually clone-proof and highly secure. 3

  • Compact IP Video Intercom

    Viking’s X-205 Series of intercoms provide HD IP video and two-way voice communication - all wrapped up in an attractive compact chassis. 3