This Zoom invite could be a clever phishing trick

Even as people return to work in their offices, video conferencing is still common. We have been bitten by the video chat bug and regularly have virtual meetings with colleagues and chat with relatives and friends via webcams and smartphones.

Did you know you can host a Zoom meeting through your TV? One method is to connect a laptop to your TV via an HDMI port. There is, however, an easier way. You can use screen mirroring to connect your smartphone to your TV without the need for additional equipment. Tap or click here and Kim will tell you how it’s done.

But if you are a regular Zoom user, be careful. An elaborate phishing scheme is doing the rounds and might already be in your inbox. Keep reading to find out how to avoid being a victim.

Here is the backstory

Zoom is extremely popular for video conferencing, so it’s no surprise that cybercriminals are exploiting it to target victims. Armorblox detailed a cyberattack targeting a major online brokerage firm in a recent blog post. It was launched via email and was sent to approximately 10,000 inboxes.

The email was titled “[External]Zoom Meetings 11:00 a.m. EST [US and Canada]and the body contained the message “Your attendees have joined you in a meeting”. There is also a button to join the meeting.

Clicking on the link takes you to a fake Microsoft Outlook login page. Enter your credentials and they are sent to the crooks.

The malicious email bypassed Microsoft’s security checks and was determined to come from a safe sender. Last year, we reported similar attacks involving fake Google Meet links.

This type of phishing attack is particularly dangerous since the message appears to come from a trusted organization. It has become instinctive for some to join a meeting via an email invitation.

How to protect yourself from phishing attacks

Exercise caution when receiving links via email or SMS. There are many other steps you can take to avoid falling victim to phishing scams. Here are a few tips:

• Do not click on links and attachments you receive in unsolicited emails.
• If the message gives you a sense of urgency, delete it.
• Spelling and grammatical errors are big red flags.
• Use two-factor authentication and password managers for better security.
• Keep your operating systems, apps, and devices updated with the latest official software and patches.
• Always have a trusted antivirus program updated and running on all your devices. We recommend our sponsor, TotalAV. Right now, get an annual plan with TotalAV for just $19 at ProtectWithKim.com. That’s over 85% off the regular price!

keep reading

How to easily turn your smartphone camera into a full webcam

5 things you didn’t know your smart TV could do