How the Fake Zoom Scam Works
-

The scam typically starts on Telegram, appearing to come from someone the victim already knows. After casual conversation, the attacker suggests a Zoom call and shares a link that looks legitimate.
During the call, attackers pretend to have audio issues and send a “patch” file. Once opened, the file installs malware. The hackers then end the call, claiming they’ll reschedule—while quietly draining wallets, hijacking accounts, and spreading the attack to the victim’s contacts.
-
Social engineering scams like this are becoming increasingly sophisticated.
-
Don't reply to DMs. Always scam. Always.
-
Classic social engineering — trust first, malware second.
-
Fake Zoom “patch” = instant red flag.