AI Meeting Bots
Observable Types: domain
Description
This list incudes AI Meeting “Notetaker” bots that join Microsoft Teams’ and Zoom meetings, posing a large risk of data exfiltration.
The list additionally includes “bot free” or “botless” AI notetakers and AI interview cheat agents. These tools work as overlays, hijacking the mic and screen, promising an invisible experience for the user and meeting participants.
Botless agents may take the form of Windows and macOS installations, and in the case of Windows, installing to user folders to bypass UAC. They may also be web-based or operated through a browser extension. For the purpose of this list, we’re limited to domains for now, but defenders should be aware they will also need to hunt and block installations via browser stores and 3rd-party file-mirrors.
Blocking unapproved domains at the egress and email limits the access, registration, proliferation of AI notetakers within an organization’s environment. Bidirectional blocks applied in email filters limit registration and forwarding of meetings to notetaking services.
Monday[.]com and clickup[.]com have been excluded due to the high-friction they encounter for many organizations, but include their own bots. Organizations should also consider Microsoft’s new Teams policy to block 3rd-party agents.
Techniques
References
- https://www.nudgesecurity.com/post/shadow-ai-is-taking-notes-the-growing-risk-of-ai-meeting-assistants
- https://apnews.com/article/ai-notetaker-work-meetings-privacy-data-c700299371ca7cfec77dafdfb948067f
- https://office365itpros.com/2026/08/24/teams-meeting-notetaking-bots/
- https://www.gruensteinlaw.com/news-memos/ai-notetaking-privilege-risks
- https://www.courtlistener.com/docket/71118721/brewer-v-otterai-inc/