All customers that use 3CX’s phone system ‘will and should engage in a new risk assessment of this vendor based on what’s happened,’ Sophos’ Christopher Budd tells CRN. Following the supply chain ...

A digitally signed and trojanized version of the 3CX Voice Over Internet Protocol (VOIP) desktop client is reportedly being used to target the company’s customers in an ongoing supply chain attack.

The disclosure appears to confirm an earlier attribution by CrowdStrike to a group working on behalf of North Korea’s government. Mandiant has attributed the 3CX supply chain compromise with “high ...