Zoom Stealer — Campaign Analysis & Threat Activity

Threat entity extracted from intelligence sources

Frequency
6
occurrences
First Seen
December 30, 2025
Last Seen
July 3, 2026

Related Threat Clusters

  • MeetingTV Sues Koi Security Over AI-Generated Espionage Claims

    MeetingTV has filed a lawsuit against Koi Security, a subsidiary of Palo Alto Networks, claiming that a blog post published on December 30 falsely linked its services to a Chinese espionage operation. The report,…

    7 articles · Updated July 3, 2026
  • Zoom Stealer Extensions Compromise 2.2 Million Users' Meeting Data

    A campaign named Zoom Stealer has been identified, affecting 2.2 million users of Chrome, Firefox, and Microsoft Edge through 18 malicious browser extensions. These extensions are designed to collect sensitive online…

    7 articles · Updated December 30, 2025
  • Malicious Chrome Extensions Steal User Data for Years

    Two malicious Chrome extensions, disguised as proxy tools, have been stealing sensitive user data since at least 2017. Named 'Phantom Shuttle', these extensions have been active in the Chrome Web Store and primarily…

    3 articles · Updated January 6, 2026

Recent Intelligence Reports

  • AI Is Now Being Blamed When Cybersecurity Goes Wrong — Memeburn · July 3, 2026
  • MeetingTV sues Palo Alto Networks for allegedly trusting AI to falsely link them to Chinese espionage — Cybernews · July 3, 2026
  • Startup sues Palo Alto Networks' Koi Security, saying an AI — Theregister · July 2, 2026
  • Browser extension malware infected 8.8M users in DarkSpectre attack — Foxnews · January 6, 2026
  • Zoom Stealer browser extensions harvest corporate meeting intelligence — Bleepingcomputer · December 30, 2025
  • Zoom Stealer browser extensions harvest corporate meeting intelligence — Bleepingcomputer · December 30, 2025

CVSS v3.1 Breakdown