3CX DesktopApp supply-chain attack (trojanized signed builds) ยท updates https://pwn.watch/i/3cx-desktopapp-supply-chain-attack-2023 Signed 3CX DesktopApp builds for Windows and macOS shipped with embedded malicious code. Mandiant traced it to a North Korea-linked actor (UNC4736) who first got in through a trojanized X_TRADER install from Trading Technologies: a supply-chain attack caused by another supply-chain attack. en Thu, 20 Apr 2023 00:00:00 GMT 3CX DesktopApp supply-chain attack (trojanized signed builds): Mandiant: the 3CX breach began with a trojanized X_TRADER package, the first software supply-chain attack it had seen caused by another https://pwn.watch/i/3cx-desktopapp-supply-chain-attack-2023 https://pwn.watch/i/3cx-desktopapp-supply-chain-attack-2023#2023-04-20-ec259044 Thu, 20 Apr 2023 00:00:00 GMT critical <p><a href="https://cloud.google.com/blog/topics/threat-intelligence/3cx-software-supply-chain-compromise">Source</a></p> 3CX DesktopApp supply-chain attack (trojanized signed builds): 3CX confirms the compromise and tells customers to uninstall the Electron desktop app https://pwn.watch/i/3cx-desktopapp-supply-chain-attack-2023 https://pwn.watch/i/3cx-desktopapp-supply-chain-attack-2023#2023-03-30-6f2f597b Thu, 30 Mar 2023 00:00:00 GMT critical <p><a href="https://www.3cx.com/blog/news/desktopapp-security-alert/">Source</a></p> 3CX DesktopApp supply-chain attack (trojanized signed builds): CrowdStrike reports malicious activity from the signed 3CXDesktopApp on customer machines https://pwn.watch/i/3cx-desktopapp-supply-chain-attack-2023 https://pwn.watch/i/3cx-desktopapp-supply-chain-attack-2023#2023-03-29-5bf37680 Wed, 29 Mar 2023 00:00:00 GMT critical <p><a href="https://www.crowdstrike.com/en-us/blog/crowdstrike-detects-and-prevents-active-intrusion-campaign-targeting-3cxdesktopapp-customers/">Source</a></p>