Zoom-Bombing & Security Tips

Zoom-Bombing & Security Tips

Zoom-Bombing

There is a new phenomenon happening at the moment called ‘Zoom-bombing’. There has been this sudden rapid increase of uninvited users adding themselves into Zoom calls. Mostly to create loud or inappropriate noises or gestures, sharing explicit imagery or videos into the chat, and even taking over screen share.

Jake Moore, cybersecurity specialist at ESET has experienced Zoom-bombing first-hand. On March 26, Moore entered a meeting:

“There was a list of people the host was allowing in, but all of a sudden there were too many, and she let them all in at once. Some of these were bombers and they took over. We killed the session ASAP and started again.”

Source – Kate O’Flaherty, Forbes

Setting up Account

Registering Your Account

If using Zoom for work, use your work email over your personal email when registering for your Zoom account. If by chance you don’t have a work email, create a new email with a well known public domain to keep your personal contact details private.

Watch out for Fake Zoom apps

With the huge increase of people using Zoom, for both personal and work reasons, it is no surprise that hackers and scammers have started targeting it. Never download or signup to Zoom from anywhere but the official Zoom website, here. 

How to Avoid Zoom-Bombing

Avoid Publicly Sharing Meetings 

It might be quicker to put a link on FB or Twitter for your friends and family to join a big group get-together, however you are only making it easier for these people to gain access. Just by them searching ‘Zoom.us’ on any public forum or Social Media, they will see all the shared meetings…. it’s that simple for them. Send meeting links via private message or email.

Use Passwords For Meetings

Using a random word or group of words will do the trick most of the time, it doesn’t have to be a long winded with capitals, numbers and special characters etc..

Set Screen-Sharing to ‘Host Only’ 

Many of the Zoom-bombing that companies and users are experiencing have been related to screen sharing. The screen is being taken over and this is where the explicit imagery or videos are being used, most of the time the meeting will need to be shut down immediately by the host. This can cause many issues especially if you are dealing with sensitive information or speaking with a client.

Disable ‘Allow Removed Participants to Rejoin’ 

Once you have removed said ‘Zoom-Bomber’, you don’t want them to have the ability to just rejoin the meeting.

Disable File Transfer

The file feature on Zoom is default set to allow anyone to send files into meetings, this vulnerability is being targeted with malware. This will not allow the the Zoom-Bombing individual to send computer viruses that yourself, family, friend, colleague or client may fall victim to.

Disable ‘Join Before Host’ 

Having control over who and when enters a meeting, especially in a professional setting is vital to contain and manage the meeting.

[email-subscribers-form id=”1″]