Securing for the Future of 3CX after first-of-a-kind, cascading software-in-software supply chain attack We’re committing to actionable steps - 7 to be exact - to harden our systems and minimize our risk of future attacks. Some steps are already completed, some still in process. To this end, we’re currently drafting a Security Charter - called ‘EFTA’. It means 7 in Greek. Here’ [...]
Mandiant identifies the source of internal network compromise While Mandiant’s investigation is still ongoing, we now have a clear overall understanding of the attack. Following our previous update, we would like to share some additional technical details to support our customers and the community. We have also published additional indicators of compromise that organizations ca [...]
Many users followed our advice to deploy our PWA web app mode instead of our Desktop App during the attack. Following this, we learned more about deploying in this mode. I wanted to share some of the things we’ve seen and give some background and suggestions on which is the best to use according to the situation. The PWA (Progressive Web App) app What is a PWA app? PWA stands f [...]
The latest Beta release of our iOS application is available to TestFlight members. The Beta release introduces some great new elements in the dialer redesign along with a number of modern and very useful features to help you manage multiple calls - either on hold or incoming - easily. You can continue navigating back and keep chatting without any loss of functionality, know who [...]
The Beta release of the 3CX App for Android is now available to download from the Google Play store. It introduces some great new elements in the dialer redesign along with a number of modern and very useful features to help you manage multiple calls - either on hold or incoming - easily. You can continue navigating back and keep chatting without any loss of functionality, know [...]
Auto starting Chrome / Edge to get Push Notifications In this blog, we focus on two actions - push notifications and enabling the option to auto start your PWA app upon sign in, across two different browsers - Chrome or - if you’re using Windows, then Edge. Read on to learn more about what you can expect when using your PWA app with either browser as well as the steps you need [...]
Following our Security Incident we've decided to make an update focusing entirely on security. We hope to release this update to QA in the coming days. We’ll then release an Alpha and Beta next week - with the final in the week following. Here’s what we’re including: A BLF Panel in the Dialer of PWA “App” This feature mimics a deskphone and shows BLFs similar to a deskphone. BL [...]
Initial Results from Mandiant Incident Response Following the appointment of Mandiant as our security incident response team, forensic analysis on our network and product is in progress. In a nutshell, the interim assessment concluded: Attribution Based on the Mandiant investigation into the 3CX intrusion and supply chain attack thus far, they attribute the activity to a cluste [...]
When Actions Speak Louder than Words! We’ve faced a massive security attack head on! As too have you - our Partners, our product resellers, our extension of the 3CX brand. And yet despite this, you’ve stood faithfully, shoulder to shoulder with 3CX - facing what we face. Your support has spoken louder than any words ever could. Now it’s our turn to reply. We hope our actions sp [...]
We’ve put together a detailed guide on how to reset passwords and secure your admin console, covering all major steps you can take. We’ve included changing your root credentials and what to do if you’ve forgotten them. We also take you through the all important steps of setting a system owner up. Perhaps you want to reset user credentials via the Web Client Admin view, or perfo [...]
Copyright © 2026