| 17.6°C Dublin

Revenue staff warned off Zoom as fears for taxpayers' data grows

Close

stock image

stock image

stock image

Revenue staff working from home were warned not to use Zoom over fears taxpayer information could be harvested by online marketers or "for other purposes".

The Revenue Commissioners sent out warnings to staff only to use Skype for Business and not Zoom, which had proved incredibly popular especially during the early Covid-19 restrictions.

Employees were reporting issues with the use of Skype on mobile phones and on their computers with some asking to use Zoom instead.

However, an internal email warned: "Using this as a work application would carry a risk of taxpayer information being scraped and used, primarily for targeted advertising but possibly for other purposes."

IT staff in Revenue working on an advisory for employees developed a watch-list on reasons not to use Zoom, despite its convenience.

They said it was not "a product endorsed or supported by Revenue" for conferencing and that it was not encouraged for staff internal communications.

An advisory for "if you absolutely have to use Zoom" said users should always assume someone else can read, hear, or see what you are talking about and sharing.

They were also told "Zoombombing" was becoming common and that if you did not have to sign in for a meeting, then nobody else did.

"What started as a prank is now being used to record meetings and gather information by cybercriminals," said the advisory.

The internal advisory added: "Privacy is not top of their agenda; up until recently Zoom has shared all cloud stored recordings, files and transcripts with Facebook. It continues to share such information with advertising agencies."

Tax officials were warned to watch out in particular for links in Zoom chat that might look genuine.

"Attackers are crafting links to look like a shared file but in reality it links their system to a file on your system that could allow remote access or even upload your saved passwords to them."

Even after advice had issued about use of Skype and that Zoom would not be supported, Revenue still continued to get queries from staff.

One of their IT officials wrote jokingly: "Staff taking it on themselves [to use] Zoom internally - if only there was a mail about Skype gone out."

Passwords

Revenue was also contacted by Europol and advised to cease use of Zoom.

An Irish detective sergeant based with the EU police agency forwarded concerns about bugs that could abused to steal Windows passwords, or be used to take over the webcam and microphone on a Mac computer.

It also included other security concerns, saying: "You are advised to refrain from using Zoom for conference calls."