Update as of 3/30/2020
As of March 26th the screen sharing settings within your Zoom account have automatically defaulted to “Only Host.” This setting gives hosts sole permission to share content within their meetings by default. This effectively ends the ZoomBombing threat.
If you’d like to give participants screen sharing permission, simply click the arrow to the right of the Screen Sharing icon, select Advanced Sharing Options and select All Participants. If you’d like to re-enable participant content sharing at the account level, please visit zoom.us/account/setting > In Meetings (Advanced) > and select All Participants.
If your end users would like to re-enable participant content sharing at the individual level, please visit zoom.us/profile/setting > Screen Sharing > and select All Participants.
OIT’s previous instructions and explanation of the term follow:
What is it?
Zoombombing happens when a malicious person enters a Zoom meeting and uses Zoom’s screensharing feature to post unwanted videos and images during web meetings.
How does it happen?
Zoombombing becomes possible when a Zoom link has been posted publicly. For example, you might post an “office hours” link on your website or send a meeting link to a large number of people that you don’t work closely with.
Unless you have changed Zoom’s default settings, anyone that joins the Zoom meeting can share their screen at any time.
How can I prevent it?
Log into uga.zoom.us and click on “Settings.” Click on “In Meeting (Basic)” options or scroll down until you see options for screen sharing.
Set the “Who can share?” option to “Host Only” as shown below.
These settings are also available from in-call Admin settings.
Some additional tips include:
- Disable “Join Before Host” so that attendees are placed in a waiting room until you allow them to enter.
- Disable “File Transfer” to prevent users from transferring corrupted files.
- Disable “Allow Removed Participants to Rejoin” to prevent removed attendees from re-joining.
Material for this article is taken largely from https://techcrunch.com/2020/03/17/zoombombing/