ClosedPatched
Day · Mar 29, 2023
3CX DesktopApp supply-chain attack (trojanized signed builds)
3CX DesktopApp (Electron)
Updates on Mar 29, 2023
CrowdStrike reports malicious activity from the signed 3CXDesktopApp on customer machines
Source
Summary
Signed 3CX DesktopApp builds for Windows and macOS shipped with embedded malicious code. Mandiant traced it to a North Korea-linked actor (UNC4736) who first got in through a trojanized X_TRADER install from Trading Technologies: a supply-chain attack caused by another supply-chain attack.
Read the full incident →
