500,000 Zoom accounts are being sold on the dark web

Here's your daily reminder not to reuse old passwords.
By Stan Schroeder  on 
500,000 Zoom accounts are being sold on the dark web

Hacked Zoom accounts have become merchandise that's sold en masse on the dark web and through hacker forums, new report claims.

According to BleepingComputer, which spoke to cybersecurity company Cyble, there are currently over 500,000 Zoom account credentials being sold, and while most of them seem to stem from earlier, unrelated hacks, some of them are genuine.

Cyble's experts noticed the influx of Zoom accounts for sale on April 1, and were able to purchase 530,000 of them at a bulk price of $0.002 per account. Some accounts, the report claims, are even being shared for free.

These credentials include a Zoom user's email address, password, personal meeting URL, and their host key — a six-digit pin tied to the owner's Zoom account, which is used to claim host controls for a meeting. And some of these account details belong to high-profile companies including Chase and Citybank, according to Cyble, which checked the veracity of the accounts belonging to some of their clients and confirmed they were valid.

Even though Zoom has had its share of security and privacy blunders, recently prompting the company to halt features development for 90 days in order to fix them, these account credentials do not appear to be a result of a Zoom hack. More likely, they've been gathered by a technique called credentials stuffing, in which hackers use older databases of stolen user account credentials and test them against Zoom accounts.

This isn't the first time we've seen Zoom accounts circulated on the dark web, but previous reports saw a much smaller number of accounts being sold. Now that the numbers are in the hundreds of thousands, this is becoming a serious threat to Zoom users. These accounts can be used for simple trolling via bursting into someone's Zoom meeting unannounced, but also for eavesdropping and identity theft.

The practice of crashing someone's Zoom meeting has become so commonplace that it now has a name — Zoombombing — and while Zoom did address the issue in a recent update, this doesn't help if a hacker has your Zoom account credentials.

As always, the best protection from these types of attacks is never to re-use old passwords. That's where password management tools such as LastPass and Dashlane come in handy, as they allow you to store a large number of different account credentials and protect them all with one master password.

UPDATE: April 14, 2020, 9:20 p.m. CEST A Zoom spokesperson sent Mashable the following statement: "It is common for web services that serve consumers to be targeted by this type of activity, which typically involves bad actors testing large numbers of already compromised credentials from other platforms to see if users have reused them elsewhere. This kind of attack generally does not affect our large enterprise customers that use their own single sign-on systems. We have already hired multiple intelligence firms to find these password dumps and the tools used to create them, as well as a firm that has shut down thousands of websites attempting to trick users into downloading malware or giving up their credentials. We continue to investigate, are locking accounts we have found to be compromised, asking users to change their passwords to something more secure, and are looking at implementing additional technology solutions to bolster our efforts.”

Topics Cybersecurity

Stan Schroeder
Stan Schroeder
Senior Editor

Stan is a Senior Editor at Mashable, where he has worked since 2007. He's got more battery-powered gadgets and band t-shirts than you. He writes about the next groundbreaking thing. Typically, this is a phone, a coin, or a car. His ultimate goal is to know something about everything.


Recommended For You




When is the last day to file taxes?
A person at their computer holding a note that reads "tax time."

More in Tech
40+ of the best outdoor deals during Amazon's Big Spring Sale
Solo Stove pizza oven and other outdoor gear in truck bed

Get up to 25% off Kodak instant cameras during Amazon's Big Spring Sale
Kodak instant camera taking photo of woman holding flowers



Get up to 80% off more than 700 Kindle books
LONDON - JULY 16: Amazon Kindle paper white e book reader. July 16, 2014 in London, UK.

Trending on Mashable
NYT Connections today: See hints and answers for March 28
A phone displaying the New York Times game 'Connections.'

NYT's The Mini crossword answers for March 28
Closeup view of crossword puzzle clues

Wordle today: Here's the answer and hints for March 28
a phone displaying Wordle


NYT Connections today: See hints and answers for March 27
A phone displaying the New York Times game 'Connections.'
The biggest stories of the day delivered to your inbox.
This newsletter may contain advertising, deals, or affiliate links. Subscribing to a newsletter indicates your consent to our Terms of Use and Privacy Policy. You may unsubscribe from the newsletters at any time.
Thanks for signing up. See you at your inbox!