SiliconANGLE

3CX breach linked to software supply chain attack on third party

A successful breach of videoconferencing and business phone company 3CX Ltd. first reported last month was caused by a software supply chain attack on a third party, Google LLC’s Mandiant has revealed ...
Ars Technica

Trojanized Windows and Mac apps rain down on 3CX users in massive supply chain attack

Hackers working on behalf of the North Korean government have pulled off a massive supply chain attack on Windows and macOS users of 3CX, a widely used voice and video calling desktop client, ...
TechCrunch

There’s a new supply chain attack targeting customers of a phone system with 12 million users

Multiple security firms have sounded the alarm about an active supply chain attack that’s using a trojanized version of 3CX’s widely used voice and video-calling client to target downstream customers.
PC Magazine

Uninstall Now: Hackers Hijack 3CX Desktop App to Deliver Malware

If you use the 3CX desktop app for Windows or Mac, watch out: Hackers have hijacked the software to deliver malware to computers. On Wednesday, cybersecurity providers noticed malicious activity ...
CRN

Attacker Targeted Cryptocurrency Firms In 3CX Campaign: Kaspersky Lab

The supply chain attack was about more than just deploying information-stealing malware onto 3CX customer systems, according to Kaspersky researchers. The threat actor behind the 3CX supply chain ...
PC Magazine

3CX Supply Chain Attack Traced to Employee Who Installed Malicious App

Suspected North Korean hackers compromised a futures trading app that was later installed on a 3CX employee's personal computer. The supply chain attack on the 3CX voice-calling app has been traced ...
Computer Weekly

3CX incident may be world’s first double supply chain attack

Google Cloud’s Mandiant says it has observed what appears to be the first ever instance of a double software supply chain attack, after uncovering evidence that suggests that the widespread 3CX ...