Home > Categories > Web Conferencing > Zoom Account Logins for Sale … on the Dark Web

Software Category

Web Conferencing

Write Review

Zoom Account Logins for Sale … on the Dark Web

Security research firm Cyble has reported a discovery of over 500,000 Zoom accounts, including login and password information, being sold on the dark web and in hacker forums.

BleepingComputer reports that these accounts are being sold for as little as a penny apiece, and in some cases are given away for free. “Some of these Zoom accounts are offered for free on hacker forums so that hackers can use them in zoom-bombing pranks and malicious activities,” writes Lawrence Abrams.

The article goes on to suggest that user account information was cultivated through past vulnerabilities in Zoom, whether due to insecure passwords used or past data breaches where compromised account passwords were never changed.

Below is a sample of a redacted list of user account emails and passwords, including accounts from members of the University of Vermont, University of Colorado, Dartmouth, Lafayette, and the University of Florida.

Image courtesy of BleepingComputer, April 2020

BleepingComputer confirmed that a number of the listed email addresses are current active Zoom accounts and that the login credentials are indeed correct.

Our Take

Change your passwords. Set it to something that can’t be easily guessed, and do not use the same password on multiple systems or sites. That is the persistent message that IT departments have been telling their users, and this time is no different.

With Zoom’s overnight stardom and the sudden wide use of Zoom for both personal and business communications, now would be an ideal time for IT departments to remind their users to change their Zoom passwords at their earliest convenience.

From Zoom’s standpoint, though this does not exploit a current vulnerability, its brand is still associated with bad press around security and its product. Zoom has started to take IT security very seriously, and it would not be unreasonable for the company to implement some measure of password complexity for its user accounts, enforce a password change across the board, or to send out communication to all Zoom users asking them to change their passwords.

Want to Know More?

Zoom at SoftwareReviews

Other Recent Research in Web Conferencing

Web Conferencing

Briefing: BlueJeans by Verizon

On October 29, 2020, Verizon briefed on BlueJeans’ product vision and direction. This note outlines the new and upcoming features that users can expect from BlueJeans for the rest of 2020 and into 2021. However, with the table stakes margin for features rapidly increasing in the web conferencing marketspace, BlueJeans’ new features are less a way to stand out from the crowd and more as a necessity to keep up.

Web Conferencing

Briefing: Cisco Webex Legislate

On November 5, 2020, Cisco briefed on its upcoming virtual legislative session tool Webex Legislate. With a range of features that governing bodies around the globe have desired throughout the extent of the pandemic, Webex Legislate surely becomes the must-have tool for conducting virtual and hybrid sessions – especially if an agency is already leveraging Cisco products.

Web Conferencing

Cisco Introduces Webex Classrooms and the Webex Control Hub

On September 1, 2020, Info-Tech briefed with Cisco about current and upcoming features of its Unified Webex app for September. Significant changes include the introduction of Cisco Webex Classrooms and the Webex Control Hub, with notable updates also coming to Webex for Education, Webex Meetings, and Webex Teams.

Web Conferencing

Recon Research Highlights Web Conferencing as the Future of the Workplace

Enterprise Connect’s virtual conference and expo for 2020 featured a wide variety of sessions on communications and collaboration for the enterprise. In this fourteenth note of fourteen, I report on Recon Research’s latest study on how COVID-19 has cemented web conferencing as the future of the workplace.