A sophisticated scam impersonating a Zoom meeting tricked victims into visiting a fake website that simulated network issues and prompted a mandatory "update," silently downloading a malicious installer. The malware, a rogue version of the legitimate Teramind monitoring tool, deployed surveillance capabilities to log keystrokes, capture screenshots, track web activity, and more on compromised Windows machines. Discovered on February 11, 2026, via Microsoft Defender for Endpoint, the campaign infected 1,437 users globally within 12 days before wider reporting by Malwarebytes. Experts urge users to access Zoom only through official apps or direct URLs and to avoid clicking unexpected update prompts.