Watch Out for Spoofed Zoom, Skype, Google Meet Sites Delivering Malware

**Active multi-platform malware and phishing campaigns:** Threat actors are using typosquatted spoof websites for popular video‑conferencing apps to distribute Android and Windows RATs (SpyNote, NjRAT, DCRat), WogRAT hosted via aNotepad, and large-scale phishing/BEC operations (TA4903) employing QR-code quishing and EvilProxy AiTM techniques to steal credentials and facilitate invoice fraud; additional malware families observed include DarkGate, Agent Tesla, and Remcos.