We want to make you aware of a cybersecurity scam currently targeting real estate professionals.
In this scam, an individual posing as a prospective buyer contacts an agent about a listing. The person may say they live out of the area and ask to discuss the property through Zoom or another video meeting platform.
The scam typically works like this:
- The prospective “buyer” contacts you about one of your listings.
- They ask to meet you by Zoom or have you conduct a virtual walkthrough of the property.
- They claim they cannot use your normal version of Zoom or another meeting platform.
- They send you a link and ask you to download or install software to join the meeting.
- The link may look legitimate, but the software can give the attacker remote access to your computer.
Once installed, malicious software may allow an attacker to access your computer later without your knowledge. This could potentially expose your email, saved passwords, MLS credentials, verification codes, and other sensitive information.
How to Protect Yourself
Never download or install Zoom, Microsoft Teams, remote-access software, browser extensions, or software updates from a link sent to you by an unknown prospective buyer or seller.
If someone wants to meet virtually, create the meeting yourself using Zoom, Teams, or another trusted application you already use and send the meeting invitation to them.
Additional precautions:
- Do not install software at the request of an unknown lead.
- Be suspicious if someone insists that you use their meeting link or download a different version of an application.
- Download software and updates only from the application’s official website or app store.
- Never provide passwords or verification codes to another person. If something about a prospective customer’s request seems unusual, stop before clicking or installing anything.
If You Think You May Have Installed Something
If you recently installed software or clicked a suspicious meeting link at the request of a prospective customer, disconnect the affected computer form the internet and contact your company’s IT department or a qualified computer security professional immediately.
Do not use the potentially compromised computer to change passwords, as an attacker may still be able to monitor activity on the device.
Cybercriminals frequently target real estate professionals because of their access to sensitive customer, transaction, and financial information. A few extra seconds of caution before clicking a link or installing software can help prevent an account or computer compromise.
Remember: You control the meeting. Create the meeting invitation yourself and send the link to the prospective customer—not the other way around.
