'Elusive Comet' Attackers Use Zoom to Swindle Victims

Researchers at the Open Security Alliance warn of an active campaign by a group dubbed Elusive Comet that impersonates legitimate media/podcast organizations to socially engineer cryptocurrency users into Zoom calls, obtain remote control of devices, and install infostealers or RATs to exfiltrate crypto funds — with millions reportedly stolen; users are advised to be wary of unsolicited media offers and to never grant device control to unknown parties.