Cyberheistnews Vol 16 #09 Fake Video Meeting Invites Trick Users Into Installing RMM Tools
KnowBe4, Tuesday, March 3rd, 2026
Threat actors are using phony meeting invites for Zoom, Microsoft Teams, Google Meet and other video conferencing applications to trick users into installing remote monitoring and management (RMM) tools, according to researchers at Netskope.
The invites lead to convincingly spoofed landing pages for fake video meetings, complete with a list of coworkers who have supposedly already joined the call. The page instructs the user to install a software update in order to join the video meeting.
"The payload, disguised as a software update, is a digitally signed remote monitoring and management (RMM) tool such as Datto RMM, LogMeIn or ScreenConnect," the researchers write.