Fake Google Meet and Zoom pages and fake VC and recruiter fronts targeting crypto workers (SEAL, Oct 2026): 11 domains
- Scam type: Phishing
- Project or site name: Fake meeting pages and fake VC / recruiter fronts
- Incident date: 2026-10-27
- Reported: 2026-10-27
- Last updated: 2026-10-27
Security Alliance (SEAL) reported on 2026-10-27 a set of fake meeting pages, which it says are not attributed to any APT group, and a set of fake venture-capital and recruiter fronts. SEAL says targets of the fronts are asked to download a malicious video-conferencing app, run a ClickFix command, or install bogus Obsidian plugins, depending on the attacker. Fake meeting pages named by SEAL: gmeet[.]space gmeets[.]top joingooglemeetings[.]help joinmeeting-now[.]com meetingms[.]com 05zoom[.]live us06zoom[.]us[.]com Fake VC and recruiter fronts named by SEAL: mirae[.]fund shape3[.]vc…
Websites in this report: gmeet.space, gmeets.top, joingooglemeetings.help, joinmeeting-now.com, meetingms.com, 05zoom.live, mirae.fund, shape3.vc, boardroomtalent.co, hiresharbor.com