Zoom - threat level and remediation?

Apr 07, 2020 Last reply: 6 years ago 6 Replies

Zoom has had a lot of (apparently well deserved) bad publicity lately. Enough to make people think twice about using it outside a closed corporate network.



However I can't seem to find any advice about what to do if you have installed and used Zoom, apart from uninstall it and don't use it in future.



Threats I think are present:



Zoom profiles your computer and snoops on all sorts of things unrelated to the Zoom conversation (seems a biggie)



The encryption isn't end to end as the server distributes and holds a copy of the key and allegedly stores the conversation for further analysis (selling on information to advertisers, for example).



The encryption key is sent to Chinese servers



The encryption isn't strong so can be broken



Encryption keys are predictable(?)



Conference IDs are both predictable and susceptible to brute force. There is even at least one Zoom war driving demonstrator out there.


Well, enough for the moment. If the threats are even half way true there is the potential for your PC (or other device) to have been profiled and sensitive information such as banking IDs to have been stolen. Possibly also mobile number used for 2FA. Email addresses and passwords? However I can't seem to find any advice on what to do if you have used Zoom.



Firstly, delete Zoom and don't use it in future seems sensible.



However if your system has been profiled, presumably you should use a comprehensive off-line virus scan (booted from CD or USB). You should also consider any stored credentials potentially compromised (as in the many data breaches of the past) and change any sensitive passwords once you have cleaned your system. Anything else? Or is this over the top?



Cheers


Dave R


A virus scanner will only pick up Zoom if it fits the profile of a virus. Scanner for other malware likewise.

If you're serious about security you probably need to wipe the partition and restore from a pre-Zoom backup.

Owain

Clearly, don't use Zoom for anything important, but I don't see a problem if somebody listens to your chat with Granny. Maybe, your chats with Granny are different to mine? :)

If it's also snooping on your computer, to the extent that your security is compromised, that's altogether a different matter. I hadn't heard that it was, until you posted.

Zoom is a useful service that's much in demand at the moment. It has consequently come under quite a bit of scrutiny -- more than would normally have been the case -- and a number of legitimate concerns have been raised. Zoom say they're addressing the issues -- well, they would say that, wouldn't they? -- it remains to be seen what they will actually do.

However, I've seen nothing to suggest that Zoom isn't a suitable platform for video chats between family and friends. I'm not sure I'd trust it for commercial information -- or Cabinet Meetings! -- but as long as you're happy that you could potentially be being overheard you haven't really got much to worry about.

Uninstalling it should be enough, as long as you're confident that you really have uninstalled it and everything that it brought with it. Running some sort of anti-malware tool afterwards is probably a good idea.

If that's true it's a problem, but once you've removed Zoom your problem is limited to things that Zoom snooped while it was still installed.

The crypto Zoom uses is certainly not good. Just assume you're using an unencrypted connection and don't discuss state secrets, missile launch codes, or next week's budget and you're probably safe.

IDs are just sequences of decimal digits. You can try a random number and see whose conference that takes you to ... you will still need a password to get in.

Choose a strong password to reduce the chance that someone will randomly invite themselves to your conference.

If you store sensitive information on your computer you should encrypt it. Zoom is not the only piece of software that may or may not contain malware that might try to steal your details. You are just as likely to lose it to malware in a website that exploits a browser vulnerability.

Yes ... no ... well, maybe.

It's important to remember that computers can be abused as well as used, and that any data you store on yours is potentially at risk from any software that it runs -- whether that's a malicious program you download or a malicious payload in a website. Assess the risk, and manage it. If that means that you choose to eschew Zoom that's up to you -- you can always use something like Skype or Google Hangouts instead, if you trust them any more?

here is one companies take on all of the security issues. Look at each one and consider if it is an issue for you.

formatting link

>

Don't see the original post so replied here.

If Zoom is secure enough for William & Kate to use for a video call to a school then I presume it would have been vetted by their security IT specialists.

-

formatting link
Note: Apart from one comment, the link doesn't specify that Zoom was used but the newspaper does.

Be interesting to know of any software ever where someone somewhere hasn't said it has security issues. ;-)

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required