Zoombombing incidents usually take place after one of the participants shares a link to a Zoom meeting (and sometimes its password) on some form of social media asking others to disrupt the conference. Zoom hopes this feature will prevent these disruptions before they take place. Cybersecurity professionals need to be aware of another form of conference call eavesdropping that has complicated the response to some ransomware incidents. When emergency conference call information is sent to business leaders via email in the middle of an intrusion, threat actors have the opportunity to see the invitation if it lands in any employee email account that they’ve compromised. On several occasions, threat actors have been known to quietly join meetings to eavesdrop on the conversation between the responders and decision-makers. To keep incident response meetings secure, it is important for companies to establish an “out of band” alternate way to communicate, such as through end-to-end encrypted mobile messages.

Source: https://www.zdnet.com/article/new-zoom-feature-can-alert-room-owners-of-possible-zoombombing-disruptions/