Skip to content
Threat Feed

Vendor

Zoom Video Communications

4 briefs RSS
high threat

UAT-11795 Deploys Starland RAT and WLDR Agent via Trojanized Software

UAT-11795, a sophisticated and financially motivated Russian-speaking threat actor, targets users in the U.S. and Europe with trojanized software installers to deploy custom Python-based Starland RAT and an in-memory PowerShell WLDR agent for credential theft and cryptocurrency exfiltration.

exploited Webex +2 UAT-11795 financially-motivated rat c2 trojan windows python powershell
2r 6t
high threat

Multiple Vulnerabilities in Zoom Video Communications Rooms and Workplace

Multiple vulnerabilities have been identified in Zoom Video Communications Rooms and Zoom Video Communications Workplace, which an attacker can exploit to elevate privileges and ultimately take control of a user account.

exploited Zoom Video Communications Rooms +1 vulnerability privilege-escalation account-takeover collaboration
2t
medium advisory

Multiple Vulnerabilities in Zoom Workplace and Rooms

A local attacker can exploit multiple vulnerabilities in Zoom Video Communications Workplace and Zoom Video Communications Rooms to disclose information or escalate privileges.

Workplace +1 privilege-escalation information-disclosure zoom
2r 1t
medium advisory

Potential Masquerading as Communication Apps

Attackers may attempt to evade defenses by masquerading malicious processes as legitimate communication applications such as Slack, WebEx, Teams, Discord, RocketChat, Mattermost, WhatsApp, Zoom, Outlook and Thunderbird.

Slack +9 defense-evasion masquerading windows
2r 3t