Auto starting Chrome / Edge to get Push Notifications In this blog, we focus on two actions - push notifications and enabling the option to auto start your PWA app upon sign in, across two different browsers - Chrome or - if you’re using Windows, then Edge. Read on to learn more about what you can expect when using your PWA app with either browser as well as the steps you need [...]
Following our Security Incident we've decided to make an update focusing entirely on security. We hope to release this update to QA in the coming days. We’ll then release an Alpha and Beta next week - with the final in the week following. Here’s what we’re including: A BLF Panel in the Dialer of PWA “App” This feature mimics a deskphone and shows BLFs similar to a deskphone. BL [...]
Initial Results from Mandiant Incident Response Following the appointment of Mandiant as our security incident response team, forensic analysis on our network and product is in progress. In a nutshell, the interim assessment concluded: Attribution Based on the Mandiant investigation into the 3CX intrusion and supply chain attack thus far, they attribute the activity to a cluste [...]
When Actions Speak Louder than Words! We’ve faced a massive security attack head on! As too have you - our Partners, our product resellers, our extension of the 3CX brand. And yet despite this, you’ve stood faithfully, shoulder to shoulder with 3CX - facing what we face. Your support has spoken louder than any words ever could. Now it’s our turn to reply. We hope our actions sp [...]
We’ve put together a detailed guide on how to reset passwords and secure your admin console, covering all major steps you can take. We’ve included changing your root credentials and what to do if you’ve forgotten them. We also take you through the all important steps of setting a system owner up. Perhaps you want to reset user credentials via the Web Client Admin view, or perfo [...]
Update 7 Windows Electron App build number 18.12.424 has been checked by our advisors Mandiant who found no evidence of compromise. Due to certificate changes, we had to update the naming convention. We re-opened the build to address this. Build 18.12.425 has been created and released. Below is our most up to date information. Still Preferred Option: Install 3CX as a Native Web [...]
We regret to inform you that our company has become victim to an attack on our product and the larger supply chain. Our highest priority is to be transparent in sharing details on what actions we are taking in response to this incident and what we know to date. Information is rapidly unfolding in this ongoing investigation. We want to ensure we only share validated information [...]
The Desktop App can be uninstalled as explained below. On some Windows machines where antivirus software already deleted some of the files the uninstaller may fail. On Windows: Start Type “Control Panel”, Enter Select “Programs and Features” Find 3CX Desktop App, select and press “Uninstall”. On Mac: Go to “Applications” Tap on “3CX Desktop APP” Right click then “Move to Bin” Ensure that it [...]
I’ve seen many users going straight in and redeploying the Electron Apps without even considering the PWA or the Windows Legacy App. Although clearly we’re not in a position to anger anyone or make strong demands, it still remains our duty to warn you of the security risks the Electron Apps pose right now. The rebuilt Electron Windows App with the new certificate has been sent [...]
Google has invalidated our software security certificate. This means the MSI DesktopApp files that we released yesterday afternoon can no longer be downloaded via Google Chrome (nor can the originally infected MSI files). Furthermore several AV vendors are blocking any software signed with the old security certificate. We are now going to make new msi installers with a new certificate [...]
Copyright © 2026