Digitally signed and Trojanized version of 3CX Desktop Client

[Kwang Mien]

Hi All,


Our 3CX server is version 18.0 Update 7 (Build 312).

There were cases of digitally signed and trojanized version of 3CX Desktop Client reportedly being used to target customers in an ongoing supply chain attack.

Please refer below

https://www.bleepingcomputer.com/ne...ise-3cx-desktop-app-in-a-supply-chain-attack/

The versions impacted are 18.12.407 and 18.12.416 (latest 3cx Desktop Client version)


Please advise what needs to be done to protect from such attack ?


Regards,
Kwang Mien

 

[JohnS_3CX]

You can read the blogpost here: https://www.3cx.com/blog/news/desktopapp-security-alert/

Please follow these threads:
https://www.3cx.com/community/threads/3cx-desktopapp-security-alert.119951/
https://www.3cx.com/community/threads/3cx-desktopapp-security-alert.119954/