Csoonline

Fake Zoom Meeting Scam Installs Surveillance Software on Windows

First seen 25 Feb 2026, 03:08 UTC • Blog.Malwarebytes

+3 •32.6

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A fake Zoom meeting scam has been reported, where a convincing imitation of a Zoom call prompts users to download a malicious installer. This scam targets Windows computers of employees, leading to the silent installation of Teramind, a surveillance software used for monitoring. Malwarebytes researchers have identified this threat and are warning organizations about the risks involved.

How this analysis works

Timeline

2026-02-24

Malwarebytes reports on fake Zoom meeting scam

2026-02-25

CSOonline publishes article on the same scam

Attack Flow

10 entities, 12 inferred relationships (STIX 2.1).

Technique (3)

Malware
Phishing
T1566.002 - Spearphishing Link

Organization (2)

University At Buffalo
Outlook

Indicator (1)

realtor.com

Affected Platform (3)

Teramind
Windows
Zoom

Tool (1)

Gmail

Relationships

Malware targets Teramind
Malware targets Windows
Malware targets Zoom
Phishing targets Teramind
Phishing targets Windows
Phishing targets Zoom
T1566.002 - Spearphishing Link targets Teramind
T1566.002 - Spearphishing Link targets Windows
T1566.002 - Spearphishing Link targets Zoom
Gmail related to University At Buffalo
Gmail related to Outlook
Gmail related to realtor.com

Continue Reading

Build A Rocket Boy Faces Legal Action Over Invasive Surveillance Practices Top Insider Risk Management Platforms and Solutions Overview

Fake Zoom Meeting Scam Installs Surveillance Software on Windows

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading