How to identify and report phishing emails claiming to be from 3CX.

3CX has identified recent phishing attempts targeting partners by impersonating members of the 3CX accounting department. These emails use deceptive tactics to appear legitimate, including mimicking branding, language and known contact names.

Summary of the Issue

The fraudulent emails are not from 3CX. Their goal is to mislead recipients into:

  • Disclosing sensitive information
  • Initiating unauthorized payments

These types of phishing attacks are widespread and not unique to 3CX. Cybercriminals regularly impersonate trusted organizations to exploit established business relationships. This post outlines the essential facts partners need to know to identify and report such attacks.

Official 3CX Email Domains

Only emails from the following domains are considered legitimate 3CX communications:

Always verify the domain of the sender. Check email headers when in doubt.

Security Practices to Follow

  • 3CX does not request payment or sensitive financial information through unsolicited emails.
  • Be cautious with any unexpected or time-sensitive messages, especially those mentioning changes to banking or payment details.
  • Do not click on suspicious links or open unexpected attachments.
  • Report any suspicious communication to your main 3CX contact.
  • To minimize exposure, consider configuring email rules to flag or filter messages not sent from the official domains listed above.

Ongoing Measures

3CX continues to monitor and address these threats and advises all partners to remain vigilant. If you have questions or concerns, contact your 3CX representative directly.