Loom
Loom records your screen, camera and voice so you can share a video explanation by link. It’s made by Atlassian, based in Australia.
Criminals have used its name in fake downloads or scams, so get it only from loom.com.
What it is
People use Loom to record instructions, presentations, demonstrations and feedback. Recordings are saved to a Loom workspace and can be shared by link.
With permission, Loom can capture your screen, camera, microphone and the sound playing on your Mac. You can record a whole display, one window or a selected area. These recording features explain its access to what you see and hear.
Loom is an Atlassian app with controls for who can view recordings. Its documentation explains how to make videos private and change sharing permissions. Those settings matter when recordings contain personal information.
Who makes it
Atlassian is a publicly listed software company founded in Sydney in 2002 that makes tools for teamwork. Its legal name is Atlassian Corporation. Its website is atlassian.com.
Atlassian makes other software with flaws that attackers have used. Its page in Companies lists them.
Is it the real one?
Every Mac app carries a signature from the developer who made it. Apple checks who the developer is before handing out the certificate, and macOS refuses to open an app whose signature has been tampered with.
HARD hasn’t yet recorded the signature on a real copy of Loom. Its Mac app shows who signed the copy you have.
Its bundle ID, the name macOS knows it by, is com.loom.desktop. Download it only from loom.com, not from an ad or a link someone sends you.
Fakes. In August 2024, researchers reported Google ads leading to a copy of Loom’s download website. Its fake download installed AMOS malware that could steal passwords, browser data and files, and replace Ledger Live with a malicious copy.
What it connects to
In normal use, Loom talks to these places on the internet. A firewall that asks before apps connect, like the one in HARD’s Mac app, will show them.
| Address | Why |
|---|---|
*.loom.com | Loom’s online service. |
loom-media-production.s3-accelerate.amazonaws.com | |
object-store.atlassian.com | |
cdn.segment.com | Analytics data distribution. |
api.segment.io | Analytics data distribution. |
*.logs.datadoghq.com | Service monitoring and diagnostic logs. |
What it can see
macOS asks you before an app can use these. You can change them any time in System Settings → Privacy & Security.
| Permission | What it’s for |
|---|---|
| Screen & System Audio Recording | Records your screen and, when enabled, sound playing on your Mac. |
| Camera | Includes your camera image in recordings. |
| Microphone | Records your voice. |
| Accessibility |
Security record
Problems with Loom or Atlassian in the last three years, newest first. Keeping the app up to date covers the ones that were fixed.
| When | What happened | Source |
|---|---|---|
| Atlassian reported fixes for high and critical dependency flaws in several other products in its October security bulletin. | ↗ | |
| Atlassian disclosed a critical file access flaw in several server products, with fixed versions available and affected cloud products already patched. | ↗ | |
| Atlassian disclosed a flaw allowing attackers to run code on older Confluence servers without signing in; fixed versions were available. | ↗ | |
| Atlassian’s separate Companion app for Mac had a code execution flaw that could bypass Gatekeeper; version 2.0.0 fixed it. | ↗ |
References
- Get started with Loom for MacOS support.atlassian.com
- Install the Loom desktop app support.atlassian.com
- Mac app installation: reset accessibility permission support.atlassian.com
- System Audio not captured in Microsoft Teams recordings (Mac) support.atlassian.com
- Manage the permissions and privacy of your videos support.atlassian.com
- Download the Loom Desktop App loom.com
- Atlassian investor FAQs investors.atlassian.com
- Atlassian offices and headquarters atlassian.com
- Domains, Protocols and Ports required for Loom to work on your servers support.atlassian.com
- Privacy for Humans — archived Loom privacy documentation wac-cdn-a.atlassian.com
- Atlassian release notes community.atlassian.com
- macOS stealer posing as Loom may be linked to Crazy Evil group moonlock.com
- ‘Crazy Evil’ Mac malware poses as Loom and other popular apps macworld.com
- Atlassian October 2026 Security Bulletin confluence.atlassian.com
- CVE-2026-21589 — Arbitrary File Access Vulnerability impacts Multiple Products confluence.atlassian.com
- CVE-2023-22527 — Remote Code Execution Vulnerability in Confluence confluence.atlassian.com
- CVE-2023-22524 — Remote Code Execution Vulnerability in Atlassian Companion App for MacOS confluence.atlassian.com