HACKINTOSH.ORG | Macintosh discussion forums

Over 500,000 Zoom Accounts Sold on the Dark Web and Hacker Forums

Hundreds of thousands of Zoom accounts are being sold or given away for free on the dark web and hacker forums, according to a new report by BleepingComputer (https://www.bleepingcomputer.com/news/security/over-500-000-zoom-accounts-sold-on-hacker-forums-the-dark-web/).





(https://images.macrumors.com/article-new/2019/07/zoom_logo.jpg)


Zoom has surged in popularity in recent weeks as the number of people working from home has increased, but concerns about the videoconferencing app's security have also made the headlines (https://www.macrumors.com/2020/04/01/zoom-end-to-end-encryption-claims-misleading/). However, the availability of Zoom accounts on the dark web does not appear to be a direct consequence of the app's failings.





Rather, the sale of the login details are said to be the result of "credential stuffing attacks," where hackers attempt to log in to Zoom using accounts leaked in older data breaches.





Successful logins are then collated into lists and sold on or offered for free to other hackers, with the intention of using them in zoom-bombing pranks or for malicious reasons.





The accounts are reportedly being shared via text sharing sites as lists of email addresses and password combinations. The accounts can include a victim's email address, password, personal meeting URL, and their HostKey.





(https://images.macrumors.com/article-new/2020/04/500k-zoom-accounts.jpg)<center>Zoom accounts sold on hacker forums</center>


Cybersecurity firm Cyble (https://www.cyble.io/), which was able to purchase 530,000 Zoom credentials for less than a penny each at $0.0020 per account, said the Zoom accounts began appearing in the hacker community at the beginning of April, with hackers offering the accounts to build reputation.





The finding underscores the importance of using unique passwords for each website where an account is registered. Concerned users are encouraged to check if their email address has been leaked in data breaches using the Have I Been Pwned (https://haveibeenpwned.com/) website or Cyble's AmIBreached (https://amibreached.com/) data breach notification service, and change their Zoom password if used elsewhere.<div class="linkback">Tags: security (https://www.macrumors.com/guide/security/), Zoom (https://www.macrumors.com/guide/zoom/)</div>
This article, &quot;Over 500,000 Zoom Accounts Sold on the Dark Web and Hacker Forums (https://www.macrumors.com/2020/04/14/zoom-accounts-sold-on-dark-web-hacker-forums/)&quot; first appeared on MacRumors.com (https://www.macrumors.com)

Discuss this article (https://forums.macrumors.com/threads/over-500-000-zoom-accounts-sold-on-the-dark-web-and-hacker-forums.2230810/) in our forums

<div class="feedflare">
<img src="http://feeds.feedburner.com/~ff/MacRumors-Front?d=yIl2AUoC8zA" border="0"></img> (http://feeds.macrumors.com/~ff/MacRumors-Front?a=XO0M633tp2o:zsPNGJCadpo:yIl2AUoC8zA) <img src="http://feeds.feedburner.com/~ff/MacRumors-Front?d=6W8y8wAjSf4" border="0"></img> (http://feeds.macrumors.com/~ff/MacRumors-Front?a=XO0M633tp2o:zsPNGJCadpo:6W8y8wAjSf4) <img src="http://feeds.feedburner.com/~ff/MacRumors-Front?d=qj6IDK7rITs" border="0"></img> (http://feeds.macrumors.com/~ff/MacRumors-Front?a=XO0M633tp2o:zsPNGJCadpo:qj6IDK7rITs)
</div><img src="http://feeds.feedburner.com/~r/MacRumors-Front/~4/XO0M633tp2o" height="1" width="1" alt=""/>

Source: Over 500,000 Zoom Accounts Sold on the Dark Web and Hacker Forums (https://www.macrumors.com/2020/04/14/zoom-accounts-sold-on-dark-web-hacker-forums/)