ClosedPatched
Day · Apr 20, 2023
3CX DesktopApp supply-chain attack (trojanized signed builds)
3CX DesktopApp (Electron)
Updates on Apr 20, 2023
Mandiant: the 3CX breach began with a trojanized X_TRADER package, the first software supply-chain attack it had seen caused by another
Source
Summary
Signed 3CX DesktopApp builds for Windows and macOS shipped with embedded malicious code. Mandiant traced it to a North Korea-linked actor (UNC4736) who first got in through a trojanized X_TRADER install from Trading Technologies: a supply-chain attack caused by another supply-chain attack.
Read the full incident →
