Don’t Let Zombie Zoom Links Drag You Down
Summary: KrebsOnSecurity reported that many organizations, including Fortune 500 firms, have exposed Zoom links containing permanent Personal Meeting IDs and embedded passcodes that let anyone start or join meetings as a valid employee, and that these links can work indefinitely. Researcher Charan Akiri, a security engineer at Reddit, built a crawler that identified thousands of organizations with working 'zombie' Zoom links, with some indexed links dating to 2020 and 2021 and others found at the NFL, LinkedIn, Oracle, Humana, Disney, Warner Bros and Uber.
What's compelling: An attacker holding one of these links can create meetings and invite others while posing as the authorized employee, opening a path to impersonation, confidential information access and business email compromise. Thousands of organizations are already exposed, and the links do not expire on their own.
Read the original at Krebs on Security ↗
- Topics
- Phishing & Social Engineering
- Related
- US disrupts North Korean campaign behind $400 million crypto theft Cyber Risks · Nov 14, 2026North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure Cyber Risks · Nov 13, 2026FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls Cyber Risks · Nov 13, 2026