Slow Mist: Investors need to be wary of phishing attacks disguised as Zoom meeting links

On December 27, SlowMist posted on social media to remind users that investors should be wary of phishing attacks disguised as Zoom meeting links. The attackers use the domain name "app[.]us4zoom[.]us" to impersonate legitimate Zoom meeting links. This webpage closely imitates the real Zoom meeting interface. When users click the "Start Meeting" button, it triggers the download of a malicious installation package instead of launching the local Zoom client. Hackers collect user data and decrypt it to steal sensitive information such as mnemonic phrases and private keys. These attacks usually combine social engineering and Trojan techniques.