Security News > 2020 > November > Warning: Massive Zoom phishing targets Thanksgiving meetings
Everyone should be on the lookout for a massive ongoing phishing attack today, pretending to be an invite for a Zoom meeting.
With many in the USA hosting virtual Thanksgiving dinners and people in other countries conducting Zoom business meetings, as usual, today is a prime opportunity to perform a phishing attack using Zoom invite lures.
The phishing attack pretends to be from Zoom and states, "You received a video conference invitation," with a link that can be clicked on to review it, as shown below.
The phishing page will automatically have the targeted user's email address inputted into the phishing landing page and prompts the user to enter their password.
TheAnalyst told BleepingComputer that the phishing pages are verifying credentials as they are entered by attempting to log into their accounts via IMAP. At the time of this writing, BleepingComputer has been able to verify that this phishing attack has stolen over 3,600 unique email credentials.