Fake Zoom invite used to take over a Telegram account (SEAL: SINT-69, Oct 2026): 03s[.]us, fartimo[.]us, ilozeuam[.]us, ventok[.]us
- Scam type: Phishing
- Project or site name: Fake Zoom meeting front end (SEAL: SINT-69)
- Incident date: 2026-10-27
- Reported: 2026-10-27
- Last updated: 2026-10-27
Security Alliance (SEAL) reported on 2026-10-27 that an intrusion set it tracks as SINT-69, and describes as uncategorized, used a fake Zoom invite to take over a Telegram account during the week of 20-27 October. Domains named by SEAL: Fake Zoom front end: 03s[.]us Payload hosts: fartimo[.]us, ilozeuam[.]us Video servers: ventok[.]us urlscan.io has public scans of ilozeuam[.]us from 21 and 22 October 2026. How to stay safe: open Zoom links only on zoom.us, and don't download a meeting app or plugin from a link someone sends you. Confidence: High that SEAL lists these domains. The SINT-69…
Websites in this report: 03s.us, ilozeuam.us, ventok.us