Securing Your Video Conferences from “Zoombombing” and Other Threats

Before we explore Zoombombing, imagine this:

‍

You’re a sales manager in a video meeting with a qualified lead. You are trying to close a huge deal. The prospect company’s top executives are there. Even your bosses have dialed in at the last minute because they are excited about the deal.

‍

You have been sharing your screen to present your pitch deck. Just as you reach the big reveal, you are interrupted by the sound of a bullhorn.

‍

You turn off screen sharing to check the commotion. That is a big mistake. Someone takes over the feature and starts sharing meme pictures. Offensive messages appear in the chat room, including:

• Racist remarks.
• Lewd comments directed at your prospect’s female executive.

‍

The attack ends as fast as it began. You try to steer the meeting back on topic, but you know it is a lost cause. You have to end the call and promise to reschedule. However, you suspect that meeting will never happen again.

What is Zoombombing?

The scenario above is a prime example of "Zoombombing." It is defined as an unwanted, disruptive intrusion into video conference calls.

‍

This phenomenon rose to prominence early in 2020. At that time, there was a massive uptick in videoconferencing for work-from-home setups during the COVID-19 pandemic.

‍

Key facts about Zoombombing:

• It is not limited to one specific provider.
• It affects schools, businesses, doctors, and governments.
• Attackers get ahold of meeting IDs to disrupt calls.
• Intruders share inappropriate content or offensive chat messages.

‍

Attackers previously guessed number combinations or searched the internet for public links. Now, they reportedly share meeting IDs freely on forums and social media so others can launch easy attacks.

Conference calls as entry points for security threats

This behavior does more than just attract media attention. It shows how workplace tools can be abused as attack vectors for malware. When sensitive data is at risk, a "prank" becomes a serious security issue.

‍

Consider these hidden risks:

• Eavesdropping: An unwanted visitor hides on mute to listen to confidential information.
• Malware Links: A hacker drops a malicious URL in the chat. Attendees who click it might install a remote access Trojan.
• Exploits: Attackers may bypass meeting IDs by exploiting software vulnerabilities.
• Social Engineering: Users might be tricked into installing fake software or clicking spoofed meeting URLs that lead to phishing sites.

‍

These scenarios are increasingly likely with work-from-home setups. Employees often lack the same level of security at home compared to a protected office network.

Securing your conference programs (and how CINNOX does it)

Companies must rethink their communication strategies. You need to address remote work environments while keeping data safe. This involves reassessing tools and how you manage software upkeep.

‍

How to have more secure meetings:

• Keep software up-to-date: Developers regularly release updates. These provide new features and, more importantly, fix vulnerabilities that hackers exploit.

• Avoid sharing meeting info in public: Never post meeting links on social media. For public events like webinars, use registration and confirmation systems to vet attendees.

• Use host controls and waiting rooms: Many threats succeed because users ignore built-in features. Always use passwords, enable waiting rooms for manual approval, and mute participants upon entry.

‍

Read more: 5 SaaS Security Risks to Consider

Secure conference calls with CINNOX

CINNOX offers specific features to protect your business communications:

• Multiple invitation methods: Hosts can share links, but they can also invite attendees via contact lists or direct dialing. This is perfect for keeping small meetings private.
• Removing and blocking participants: Hosts can kick out any participant instantly. Once removed, that user cannot rejoin unless the host invites them back.
• SMS verification: Hosts can require participants to verify their phone number via SMS before they are allowed into the conference.
• Share link deactivation: Hosts can "kill" the conference link once all required guests have arrived. This prevents anyone else from joining, even if they have the link.

‍

As video calls and live chat become vital to your strategy, security ensures business continuity and customer trust. A unified solution like CINNOX provides the baseline you need for safe, professional calls.