Archive · 2 Sep 2025
Hackers Use Fake Meeting Invites to Spy on Companies
Imagine you get an email inviting you to a work meeting, but it's a trick.
Hackers are sending these fake invites to companies.
When you click, they try to install a tool that lets them secretly watch what you're doing on your computer.
This tool is normally used by IT teams to fix problems, but the hackers use it to spy on employees and steal information.
They're targeting many companies, especially those in education, healthcare, and finance.
These hacker tricks are becoming more common, and they are making it harder to stop them.
Experts say companies need to be extra careful about which emails and links they open.
Hackers are using fake Zoom and Microsoft Teams invites to target organizations.
The goal is to install ConnectWise ScreenConnect, a remote access tool.
The campaign has affected over 900 organizations worldwide.
Education, healthcare, and financial services are being targeted the most.
Attack kits and stolen logins are being sold on the dark web.
- Who
- Hackers
- What
- Using fake meeting invites to deploy remote access tools and spy on companies.
- When
- Ongoing campaign.
- Where
- Worldwide, particularly targeting US, UK, Canada, and Australia.
- Why
- To gain unauthorized access, steal data, and potentially take control of systems.
- Targeted Organizations
- 900+ worldwide
- Method
- Phishing emails with fake meeting invites
- Malware Used
- ConnectWise ScreenConnect
- Primary Targets
- Education, religious groups, healthcare, financial services
- Attack Kits
- Sold on the dark web for a few thousand dollars
- Stolen Logins
- Resold for $500 - $2,000