That could be exploited by black hat hackers or

that could be exploited by Black Hat Hackers or malicious users. According to Nigh (2020), some of the
security concerns with Zoom are listed below:
◦ Zoombombing – Black hat hackers or malicious users were able to enter a chat and harass others and
disrupt the meeting.
◦ Hyperlinks in chats – A hyperlinked Universal Naming Convention (UNC) path could be shared to steal
the user’s credentials and/or inject malware into the victim’s computer.
◦ Backdoor – A vulnerability only for Macs that allowed Zoom to bypass normal authentication or
encryption keys.
◦ End-to-End Encryption – Zoom claimed the meetings were using end-to-end encryptions for each
meeting but Zoom is still able to handle the data prior to encrypting it and then sending it. The provider in
a traditional end-to-end encryption would not be able to access such information but in this case, Zoom
employees with malicious intent may be able to view personal/sensitive information.

Threat Vectors, Ideologies, and
Ideologies of a Black Hat Hacker
In this incident, it is clear what the Black Hat Hacker’s
intent was. According to Winder (2020), the 500,000 user
credentials that were stolen were sold online.
When Zoom became a popular application to utilize
during the initial COVD pandemic, Black Hat Hackers
took the opportunity to exploit Zoom and their users.
According to Winder (2020), the process of users using
their same credentials for multiple accounts is known as
the “Schrödinger’s credentials”. Black Hat Hackers took
advantage of the user’s complacency over creating
unique and strong passwords and were able to exploit
multiple users.