April 18, 2025 By Zeljka Zorz
Did you know that when participating in a Zoom call, you can grant permission to other participants to control your computer remotely?
While this feature may come in handy when dealing with trusted family, friends and colleagues, threat actors have started abusing it to install malware on targets’ computer.
The Zoom remote control attack
This specific tactic has been leveraged by an individual or group that The Security Alliance (SEAL) – a nonprofit dedicated to enhancing security within the cryptocurrency and decentralized finance sectors – has dubbed ELUSIVE COMET.
“ELUSIVE COMET is known to operate Aureon Capital, which purports to be a legitimate venture capital firm, as well as related entities Aureon Press and The OnChain Podcast. ELUSIVE COMET maintains a strong online presence with extensive history in order to establish and maintain legitimacy. This is accomplished by setting up polished websites and active social media profiles, as well as creating profiles which impersonate real people with notable credentials,” the organization recently explained.
