FBI Warns Teleconference Platforms Targeted for VTC Hijacking

As many citizens transition to teleworking and home education due to COVID-19, multiple video-teleconferencing (VTC) platforms have become targets for threat actors. The FBI Boston Division stated they have received multiple reports of conferences and virtual classrooms being disrupted by pornographic and/or hate images and threatening language. This type of attack is referred to as VTC hijacking or Zoom-bombing. Additionally, Zoom does not incorporate end-to-end encryption and recently suffered security incidents. Some steps that can be taken to mitigate VTC hijacking include ensuring meetings and classrooms are private, avoiding publicly posting a teleconference link, and using updated versions of the applications. Furthermore, care should be taken when discussing sensitive information. 

The NJCCIC recommends users of VTC platforms review the best practices provided in the Bleeping Computer article. Additional resources can be found in the CIS Security blog post.