Mar 29, 2023
1 new incident, 0 with updates.
Started
- ClosedPatched
3CX DesktopApp supply-chain attack (trojanized signed builds)
Signed 3CX DesktopApp builds for Windows and macOS shipped with embedded malicious code. Mandiant traced it to a North Korea-linked actor (UNC4736) who first got in through a trojanized X_TRADER install from Trading Technologies: a supply-chain attack caused by another supply-chain attack.
3CX DesktopApp (Electron)Closed Apr 20, 2023