Video meeting company Zoom rolled out new options to counter the threat of “Zoom bombing.”

Suspending and Reporting

Zoom added two new security features in November 2020 that customers could use to address disruptive and uninvited callers, or Zoom bombers.

1. Suspend Participant Activities

This enables hosts and cohosts to suspend meeting functions, including video, audio, in-meeting chat and breakout rooms. If they choose that option, Zoom’s platform will ask attendees whether they would like to eject a Zoom-bombing user from the meeting and share any details, including but not limited to a screenshot.

Using this will remove the person from the call and notify Zoom’s Trust & Safety team. At that point, hosts and co-hosts can resume the meeting by turning functions back on one by one.

2. Reporting Disruptive Attendees

This enables users — not just hosts and co-hosts, but anyone in the meeting — to report disruptive behavior like Zoom bombing from within the Zoom client using the “Security” badge. All account owners and admins need to do is enable reporting for non-hosts in their web settings.

3. At-Risk Meeting Notifier

The release of these two features above complements the work of the At-Risk Meeting Notifier. The At-Risk Meeting Notifier scans social media posts and other websites for publicly shared Zoom meeting links. In the event it finds a link at risk of being disrupted by Zoom bombing, the tool alerts the account owner and provides guidelines for next steps. Those steps could involve canceling and rescheduling the meeting using a different meeting ID.

Understanding the Threat of Zoom Bombing

Zoom bombing is one of the most well-known risks with Zoom’s video meeting app. It’s when an uninvited guest joins a meeting when they might have discovered the meeting’s ID via a shared in a public forum. Threat actors can also try to guess a valid meeting ID, a tactic known as ‘war dialing’.

Once they’re inside, the attacker can mess with the meeting in several ways. For instance, they can hijack the meeting and then share inappropriate media or make insensitive comments.

Or, malicious actors could choose to remain quiet so they can spy on the meeting. In this way, they can get information such as who is involved, where they work and what they’re discussing. This in turn can be used to conduct other attacks, such as phishing campaigns in the future.

Zoom Security Best Practices

Researchers are constantly discovering new security threats and risks that affect Zoom and other video conferencing apps. Acknowledging that work, make an effort to implement updates for video conferencing software on an ongoing basis. Also, consider testing new features when the app developers make them available.

At the same time, organizations and users can take specific steps to minimize the threat of Zoom bombing or other meeting bombing. These security tips include not sharing meeting IDs on public websites such as social media platforms, using passwords to prevent anyone from joining a call, setting up waiting rooms to screen for unexpected guests and disabling automatic screen sharing. Lastly, remember you always have the option of ending a call if someone decides to hijack it.

More from News

The White House on Quantum Encryption and IoT Labels

A recent White House Fact Sheet outlined the current and future U.S. cybersecurity priorities. While most of the topics covered were in line with expectations, others drew more attention. The emphasis on critical infrastructure protection is clearly a top national priority. However, the plan is to create a labeling system for IoT devices, identifying the ones with the highest cybersecurity standards. Few expected that news. The topic of quantum-resistant encryption reveals that such concerns may become a reality sooner than…

Malware-as-a-Service Flaunts Its Tally of Users and Victims

As time passes, the security landscape keeps getting stranger and scarier. How long did the “not if, but when” mentality towards cyberattacks last — a few years, maybe? Now, security pros think in terms of how often will their organization be attacked and at what cost. Or they consider how the difference between legitimate Software-as-a-Service (SaaS) brands and Malware-as-a-Service (MaaS) gangs keeps getting blurrier. MaaS operators provide web-based services, slick UX, tiered subscriptions, newsletters and Telegram channels that keep users…

New Survey Shows Burnout May Lead to Attrition

For many organizations and the cybersecurity industry as a whole, improving retention and reducing the skills gap is a top priority. Mimecast’s The State of Ransomware Readiness 2022: Reducing the Personal and Business Cost points to another growing concern — burnout that leads to attrition. Without skilled employees, organizations cannot protect their data and infrastructure from increasing cybersecurity attacks. According to Mimecast’s report, 77% of cybersecurity leaders say the number of cyberattacks against their company has increased or stayed the…

Alleged FBI Database Breach Exposes Agents and InfraGard

Recently the feds suffered a big hack, not once, but twice. First, the FBI-run InfraGard program suffered a breach. InfraGard aims to strengthen partnerships with the private sector to share information about cyber and physical threats. That organization experienced a major breach in early December, according to a KrebsOnSecurity report. Allegedly, the InfraGard database — containing contact information of over 80,000 members — appeared up for sale on a cyber crime forum. Also, the hackers have reportedly been communicating with…