Keyboard shortcuts

Press ← or → to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

AI Meeting Bots

Observable Types: domain

Description

This list incudes AI Meeting “Notetaker” bots that join Microsoft Teams’ and Zoom meetings, posing a large risk of data exfiltration.

The list additionally includes “bot free” or “botless” AI notetakers and AI interview cheat agents. These tools work as overlays, hijacking the mic and screen, promising an invisible experience for the user and meeting participants. The layer between botless meeting notetakers and cheat bots is blurring, with additional FOSS versions on GitHub.

Botless agents may take the form of Windows and macOS installations, and in the case of Windows, installing to user folders to bypass UAC. They may also be web-based or operated through a browser extension. For the purpose of this list, we’re limited to domains for now, but defenders should be aware they will also need to hunt and block installations via browser stores and 3rd-party file-mirrors.

Some notetakers are designed for full API control, meaning there is a risk to of hidden inclusion within spyware and malware. Bots will still join meetings in these cases, so tenant controls are important.

Blocking unapproved domains at the egress and email limits the access, registration, proliferation of AI notetakers within an organization’s environment. Bidirectional blocks applied in email filters limit registration and forwarding of meetings to notetaking services.

Monday[.]com and clickup[.]com have been excluded due to the high-friction they encounter for many organizations, but include their own bots. Organizations should also consider Microsoft’s new Teams policy to block 3rd-party agents.

Techniques

References

Lists