Skip to main content
CPEBuddy
FAKE Zoom Taxes MALWARE

FAKE Zoom Taxes MALWARE

Source: YouTube · John Hammond · published Apr 27, 2026 · 15:54

Cybersecurity
No ratings yet Log in to rate
Transcript Available
Description

The video highlights a sophisticated phishing scam that disguises itself as an IRS tax document notification sent through a legitimate-looking Zoom Docs link 0:06.

Key Takeaways:
• The attacker sent an email pretending to be an IRS document invite, originating from the suspicious address [email protected] 0:14.
• The scam is deceptive because it leverages Zoom's document-sharing feature to appear credible, utilizing a spoofed sender domain (realzoom.us) that mimics official Zoom infrastructure 0:31.
• Clicking the "open" button directs users to the actual docs.zoom.us domain, which adds a layer of legitimacy and increases the chances of a victim falling for the trap 0:46.

This tax-season scam demonstrates how attackers are increasingly abusing trusted platforms and legitimate file-sharing features to bypass traditional email spam filters 0:21.

Sources:

  • 0:06 IRS document email notification via Zoom
  • 0:14 Fake IRS sender email address revealed
  • 0:21 Identification of the email as a phishing attempt
  • 0:31 Explanation of the fake Zoom Docs setup
  • 0:46 The deceptive open button routing to docs.zoom.us

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 0.5 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

Did you do your taxes? Well, I did, but just last month at the end of March, I got an email from Zoom. Zoom stating IRS document invited you to view document. Apparently, [email protected] wanted to send along some tax documents. Now, if it's not already obvious, that is not the IRS, nor would we expect that to come from Zoom. This is a fishing email. A little bit crafty though, right? Hey, this is coming from realzoom.us, official legitimate Zoom, leveraging the Zoom docs capability, which I didn't know was a thing. Apparently, you can just send documents to people and that'll land in their inbox. Think like a Google Drive or Google Docs file share or Dropbox. And this open button literally takes you to docs.zoom.us. But we can pretty well presume, taking advantage of tax seas…