Fake Zoom Process Execution

Swachchhanda Shrawan Poudel (Nextron Systems)

Detects execution of fake Zoom process which could indicate potential malicious activity. Adversaries have been observed using spoofed versions of Zoom, a widely-used video conferencing and collaboration application, to distribute various types of commodity malware and gain initial access to systems.

2025-04-02 00:00:00

None

2857d10b-923c-4366-b213-97e8668d14e0

attack.initial-access attack.execution attack.t1204.002

Nextron Sigma feed only (private)