Zoom attack tricks victims into allowing remote access to install malware and steal money

ELUSIVE COMET is conducting targeted Zoom-based social-engineering attacks where attackers impersonate the Zoom app, request remote control during meetings, deploy malware (notably 'goopdate'), and exfiltrate funds and account access — one reported victim lost over $100k in crypto; the article includes an observed failed attempt and provides mitigation advice such as using Zoom in a browser and avoiding granting remote control.