3CX Desktop App vulnerability / Security group contact

[MontEnt]

Hi! A virus scanner on one of our workstations detected and cleaned a virus which had infected the 3CX desktop app on that machine. I had several exchanges with 3CX customer support where they indicated they had no ability to escalate this discovery to any security or development department. Given we use the 3CX-hosted service so we are up to date on all the latest releases and 3CX has control of all of the installation/maintenance/etc., where can we find proper contact information for the 3CX security group?

 

[MH_INDUS]

ESET also detected the 3CX Desktop App today.

 

[MontEnt]

Yes, we use ESET also, same notice/variant we received.

 

[SweetAction]

You will want to review https://www.3cx.com/community/threa...-update-initiated-from-desktop-client.119806/

 

[wars]

I am here for this also!

 

[MontEnt]

Thanks! Our desktop app version is 18.12.416 and shows to be updated 3/22, so this seems to be at least the same date for the other post.

 

[vjyrus]

the 3cx desktop app has been compromised .
https://www.crowdstrike.com/blog/cr...n-campaign-targeting-3cxdesktopapp-customers/

malicious activity emanating from a legitimate, signed binary, 3CXDesktopApp