Supply Chain Compromise Campaign Targeting 3CXDesktopApp Customers
released on 2023-03-29 @ 10:00:38 PM
On March 29, 2023, reports circulating about a potential supply chain compromise for 3CXDesktopApp — a softphone application from 3CX. The malicious activity includes beaconing to actor-controlled infrastructure, deployment of second-stage payloads, and, in a small number of cases, hands-on-keyboard activity.