Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

3CX

Security incidents tagged 3CX. Newest first.

0 3CX incidents in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½LessMore
Incidents
1
Live
0
Patched
1
Days without an incident
1282
Longest quiet run: 1282 days (Apr 21–Oct 23)
Show 1 older incident

March 2023 1

  • Patched

    3CX DesktopApp supply-chain attack (trojanized signed builds)

    Signed 3CX DesktopApp builds for Windows and macOS shipped with embedded malicious code. Mandiant traced it to a North Korea-linked actor (UNC4736) who first got in through a trojanized X_TRADER install from Trading Technologies: a supply-chain attack caused by another supply-chain attack.

    3CX DesktopApp (Electron)Closed Apr 20, 2023