--- title: ZOOM Security Plan and DoppelPaymer Ransomware Attack description: Cyberattacks continue in the wake of the COVID-19 pandemic, including exploits of Zoom and doubling-down on the DoppelPaymer ransomware strain canonical_url: https://www.acronis.com/en/blog/posts/zoom-security-plan-and-doppelpaymer-ransomware-attack/ locale: en last_updated: 2026-10-27 --- [Acronis Blog](https://www.acronis.com/en/blog/) # ZOOM Security Plan and DoppelPaymer Ransomware Attack New cyberattacks continue to roll in the wake of the COVID-19 pandemic, including exploits of the most popular video conferencing service and doubling-down on the DoppelPaymer ransomware strain. Here’s a quick recap of the latest updates to these attacks and the planned responses. [Try Now](https://www.acronis.com/en/products/cloud/trial/) [![Image 2: MSP Threats Security Team](https://staticfiles.acronis.com/images/content/1578b8dff96325855c4525d865e7fc63.png)](https://www.acronis.com/en/blog/authors/acronis-security-team/ "MSP Threats Security Team") [MSP Threats Security Team](https://www.acronis.com/en/blog/authors/acronis-security-team/) 4 min read Last updated 21 October 2022 New cyberattacks continue to roll in the wake of the COVID-19 pandemic, including exploits of the most popular video conferencing service and doubling-down on the DoppelPaymer ransomware strain. Here’s a quick recap of the latest updates to these attacks and the planned responses. ### Zoom makes some cybersecurity improvements in response to critics In the wake of the pandemic lockdown and widespread adoption of videoconferencing to support working from home, Zoom presented a 90-day plan to address users’ security and privacy concerns in the upcoming version 5.0 of its product. The promised improvements include support for end-to-end AES 256-bit GCM encryption to protect user data against tampering and eavesdropping. Zoom will also add data routing controls that let administrators choose the data center through which their network traffic is routed, which will help companies comply with the cross-border data transfer restrictions of the EU’s privacy-oriented General Data Protection Regulation (GDPR). Zoom will also make improvements to its user interface (UI) and user experience (UX) by adding a security icon on the meeting host’s menu bar for easy access to security controls. With Zoom’s broad adoption by educational institutions, teachers have wrestled with disruptions like the hijacking of screen sharing and unwanted use of drawing tools by students on the teacher’s shared screen. New default settings for Education, Basic, and single-license Pro accounts will reserve the control of screen sharing and enablement of annotations to the host, and place attendees in a waiting room until the host starts the session. These new features are designed to stop the growing practice of Zoom-bombing, in which students or outside attackers disrupt sessions by sharing or drawing offensive content, including hateful, violent or otherwise shocking images. The recent examples of this practice are many, including an Arizona State University online class hosted on Zoom for 150 students in which one participant started sharing a pornographic video. University of Southern California (USC) President Carol L. Folt also reported that some online lectures in Zoom had been interrupted with racist and vile statements. Other Zoom-bombing countermeasures will include enabling meeting passwords by default to protect unsolicited access to publicly announced meetings. Account admins will also be able to require greater password complexity, including longer passwords and a mix of alphanumeric and special characters in order to thwart the use of war-dialing hacking tools that can brute-force simpler passwords. More complex password rules will also be enforceable to protect meeting recordings stored in the cloud. We’re looking forward to seeing the more secure Zoom 5.0 release. ### The City of Torrance is under DoppelPaymer ransomware attack ![Image 3: Torrance under attack from DoppelPaymer](https://staticfiles.acronis.com/images/content/3c34c5d0cb5bebd4836d99bf2c10efad.png) Torrance under attack from DoppelPaymer The cybercriminals behind the DoppelPaymer family of ransomware variants claimed that they managed to successfully steal and encrypt municipal government data of Torrance, California, a city of 150,000 near Los Angeles. They have demanded 100 bitcoins (approximately $700,000) in exchange for the key to decrypt and restore the data. In another example of the increasingly common “double extortion” attack, the criminals have also threatened to leak sensitive data they stole prior to the ransomware attack by publishing it on their Dark Web “Doppel Leaks” site if their payment deadline is not met. To prove that they own the city’s data, they have already published several archives, including financial documents such as the city budget, accounting files, and documents belonging to the City Manager. The City of Torrance revealed that it had been attacked at 2:30 am on March 1, 2020, but officials stated that no personal data had been leaked at that time. However, according to the information that the attackers revealed to cybersecurity news site BleepingComputer.com, they claim that they managed to successfully erase backups stored on local servers and encrypt approximately 150 servers and 500 workstations that contained 269,123 files in 8,067 directories, totaling more than 200 GB of data. ### Final thought The ransomware attack on the City of Torrance demonstrates the necessity of storing backups not only locally but also in the cloud, as well as installing anti-malware solutions capable of identifying an ongoing cyber-attack and blocking it automatically to defend sensitive data even when IT personnel are out of the office. [Cybersecurity](https://www.acronis.com/en/blog/tags/cybersecurity/) [Cyber protection](https://www.acronis.com/en/blog/tags/cyber-protection/) ## Written by ![Image 4: MSP Threats Security Team](https://staticfiles.acronis.com/images/content/1578b8dff96325855c4525d865e7fc63.png) MSP Threats Security Team [Previous post](https://www.acronis.com/en/blog/posts/how-msps-can-leverage-power-platform-integration-grow-thrive-and-profit/) [How MSPs Can Leverage the Power of Platform Integration to Grow, Thrive, and Profit](https://www.acronis.com/en/blog/posts/how-msps-can-leverage-power-platform-integration-grow-thrive-and-profit/) [Next post](https://www.acronis.com/en/blog/posts/remote-work-dcig-whitepaper-shows-protection-critical/) [For Remote Work, DCIG Whitepaper Shows Protection is Critical](https://www.acronis.com/en/blog/posts/remote-work-dcig-whitepaper-shows-protection-critical/) About Acronis Acronis is a leader in AI-native cyber protection, unifying data protection, cybersecurity, IT operations and hybrid infrastructure to deliver business continuity, security and compliance with less cost and complexity. More than 21,000 service providers trust Acronis to protect over 750,000 businesses in 150 countries. Acronis is headquartered in Schaffhausen, Switzerland. [Add as a preferred source on Google](https://google.com/preferences/source?q=acronis.com) ## Related stories Want to learn more? Read the latest stories featuring this solution on our blog. [Acronis Blog](https://www.acronis.com/en/blog/) ![Image 5: stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://staticfiles.acronis.com/images/blog-card/9600f3eea83b8f4e168ea6c1409c8c26.png) [stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://www.acronis.com/en/blog/posts/stc-bahrain-and-acronis-partner-to-bring-endpoint-security-to-businesses/) We are proud to announce a strategic partnership with stc Bahrain, expanding access to advanced cybersecurity services for businesses across Bahrain. **October 26, 2026**3 min read ![Image 6: Introducing New Acronis CEO: Prakash Panjwani](https://staticfiles.acronis.com/images/blog-card/30cb571f6f1aaa131733e5727a4a250c.png) [Introducing New Acronis CEO: Prakash Panjwani](https://www.acronis.com/en/blog/posts/introducing-new-acronis-ceo-prakash-panjwani/) We are pleased to announce the appointment of our new Chief Executive Officer, Prakash Panjwani. A veteran cybersecurity CEO, Panjwani previously served as CEO of WatchGuard Technologies and SafeNet. **October 15, 2026**2 min read ![Image 7: Acronis expands MDR toward broader workspace protection](https://staticfiles.acronis.com/images/blog-card/18e90e89f5ec4ef0901f19008d4ccbf2.png) [Acronis expands MDR toward broader workspace protection](https://www.acronis.com/en/blog/posts/acronis-expands-mdr-toward-broader-workspace-protection/) Acronis is expanding the MDR service with capabilities that make this expertise easier to deliver and help partners address more risks. The developments build on a broader commitment to managed security: helping service providers protect the connected workspace while giving customers access to the expertise needed to investigate threats, respond effectively and maintain business continuity. **October 13, 2026**6 min read