Skip to main content

For those of you who wake up to Zoom Exploit news.



You can set ZoomOpener.app as a Restricted Software.



Kill Process
Restrict to exact process name
Kill Process.



I would not recommend turning on Send Email or Message to the user.

Updated script to cover 1.60 (as of today 1.50 is latest that we are seeing).



Also disabled the "MRT -d" since existing computers are already remediated.



https://www.jamf.com/jamf-nation/discussions/32561/zoom-exploit#responseChild187476



And new computers ship with post-vulnerability MRT version.

@donmontalvo Are you aware of some documentation, a thread, or something that can educate us a bit more on MRT? You mention that 1.50 is the latest you're seeing and that's what is on my system but it looks like your script has other versions in it besides 1.60. Are those real versions or is it some sort of guess that they might exist at some point?

@jhuls sorry for the very late response, might check developer.apple.com.

Terms & ConditionsCookie settings