3 ms·
If those accounts belong to an org with SSO enabled and mediocre security, that’s a win for the crooks.
by vlan0 6y ago
If those accounts belong to an org with SSO enabled and mediocre security, that’s a win for the crooks.
- avree 6y agoHuh? It's not like Zoom offers an SSO solution. The value of the accounts is two-fold: 1) Looking for Zoom premium accounts, there is actually a pretty good trade in stolen accounts on the dark web. Folks will pay a dollar for example for one of these accounts. 2) This is the more likely one—looking for people who use one shared password across multiple valuable logins.
- ilikepi 6y agoSSO is offered at the "Business" plan level. So I guess the question would be how many of the stolen accounts were for users at a lower plan level but were also controlled by espionage-worthy companies.
- robjan 6y agoYou can authenticate with Zoom using your existing SSO solution, not the other way around. When using SSO the Zoom account wouldn't have a password at all.
- samcat116 6y agoExactly. I'm surprised there are accounts from large companies that must have some sort of SSO with MFA solution. Are they not using it with Zoom? That's a no brainer
- vlan0 6y ago>2) This is the more likely one—looking for people who use one shared password across multiple valuable logins. This is my point.