# Fake Google Meet Errors Lead to Infostealing Malware Attacks! ⚠️

**URL:** <https://onehack.st/t/fake-google-meet-errors-lead-to-infostealing-malware-attacks/293966>\
**Category:** News & Articles\
**Tags:** hacking\
**Created:** [October 18, 2024, 11:05pm UTC](https://onehack.st/t/fake-google-meet-errors-lead-to-infostealing-malware-attacks/293966 "2024-10-18T23:05:05Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheJoker](https://onehack.st/user_avatar/onehack.st/thejoker/32/22660_2.png) [@TheJoker](https://onehack.st/u/TheJoker)\
**Post date:** [October 18, 2024, 11:05pm UTC](https://onehack.st/t/fake-google-meet-errors-lead-to-infostealing-malware-attacks/293966/1 "2024-10-18T23:05:05Z")

</div>

**Summary:**

1. **New Malware Campaign**  
A **ClickFix** campaign is tricking users with fraudulent **Google Meet** conference pages displaying fake connectivity errors that deliver info-stealing malware for **Windows** and **MacOS** systems.

2. **Social Engineering Tactic**  
The ClickFix method, first noted in May by **Proofpoint** , involves impersonating error messages for software like **Google Chrome** , **Microsoft Word** , and **OneDrive** to lure victims into executing harmful PowerShell commands.

3. **Malware Variants**  
Victims who follow these instructions may inadvertently install various types of malware, including **DarkGate** , **Matanbuchus** , **NetSupport** , and **Lumina Stealer** , among others.

4. **Increased Frequency**  
Reports indicate that these ClickFix campaigns have become more common, especially in the **United States** and **Japan** , evolving to use Google Meet as a lure and targeting specific industries through phishing emails.

5. **Threat Actor Groups**  
Recent analyses reveal that these campaigns are conducted by two threat groups, **Slavic Nation Empire (SNE)** and **Scamquerteo** , linked to larger cryptocurrency scam operations.

**Read more at:** [BleepingComputer](https://www.bleepingcomputer.com/news/security/fake-google-meet-conference-errors-push-infostealing-malware/)
