Lo said zWarDial evades Zoom’s attempts to block automated meeting scans by routing the searches through multiple proxies in Tor, a free and open-source software that lets users browse the Web anonymously. Lo and fellow SecKC members recently created zWarDial, which borrows part of its name from the old phone-based war dialing programs that called random or sequential numbers in a given telephone number prefix to search for computer modems. New data and acknowledgments by Zoom itself suggest the latter may be more likely.Įarlier this week, KrebsOnSecurity heard from Trent Lo, a security professional and co-founder of SecKC, Kansas City’s longest-running monthly security meetup. This suggests that many Zoom users have disabled passwords by default and/or that Zoom’s new security feature simply isn’t working as intended for all users. Nevertheless, the incidence of Zoombombing has skyrocketed over the past few weeks, even prompting an alert by the FBI on how to secure meetings against eavesdroppers and mischief-makers. Zoom also said it would block repeated attempts to scan for meeting IDs, and that it would no longer automatically indicate if a meeting ID was valid or invalid.

Zoom responded by saying it was enabling passwords by default in all future scheduled meetings. The Check Point researchers said enabling passwords on each meeting was the only thing that prevented them from randomly finding a meeting. Security experts at Check Point Research did exactly that last summer, and found they were able to predict approximately four percent of randomly generated Meeting IDs. Naturally, hackers have figured out they can simply guess or automate the guessing of random IDs within that space of digits. According to its makers, zWarDial can find on average 110 meetings per hour, and has a success rate of around 14 percent.Įach Zoom conference call is assigned a Meeting ID that consists of 9 to 11 digits. ZWarDial, an automated tool for finding non-password protected Zoom meetings.

Fake zoom link