ClosedPatched
Day · Mar 30, 2023
3CX DesktopApp supply-chain attack (trojanized signed builds)
3CX DesktopApp (Electron)
Updates on Mar 30, 2023
3CX confirms the compromise and tells customers to uninstall the Electron desktop app
Source
Summary
Signed 3CX DesktopApp builds for Windows and macOS shipped with embedded malicious code. Mandiant traced it to a North Korea-linked actor (UNC4736) who first got in through a trojanized X_TRADER install from Trading Technologies: a supply-chain attack caused by another supply-chain attack.
Read the full incident →
