New Desktop App Build Number 18.12.425 Released

[JohnS_3CX]

Not when installing but once it is running.

Uninstall, run the antivirus in a full scan to eliminate any leftovers from the compromised version.

Then can you try again and let us know please if it allows it to run?

 

[newarksolutionsltd]

Will do!

 

[newarksolutionsltd]

Fresh install flagging up update.exe

 

[Pierre_3CX]

@newarksolutionsltd I sent you PM so we look into this.

 

[Pierre_3CX]

just quick update we are monitoring any antivirus alerts,
- about K7 which detected something in the Desktop App for Windows 18.12.425 it's been reported as false positive yesterday morning 9am UK time, then cleared this morning at 4:20am and they confirmed having whitelisted the windows MSI.
- about Avast / AVG which detected something related to the signature in the Desktop App for Mac 18.12.425 it's been reported as false positive this morning 7:30am and we are awaiting feedback.

 

[abstractcure]

I'm curious why would anyone distribute a slow and memory-hogging Electron apps when a native Win32 API has been around since about 1995.

 

[Zutz79]

Is it possible to block old DesktopApp versions in 3CX Admin Console?
It would be even better if I could specify the target version.

This could effectively force users to update to the latest version or the version I specified.

Info:
My 3CX server is hosted in-house.
My domain users are allowed to self-install or uninstall the 3CX desktop app (MSI) through my deployment software.

 

[dbm-ntwt]

Can we get a clarification on what versions are affected/considered malicious?
And any way to check the app version besides going to through the Control Panel? (seems I have to check appwiz.cpl)
I currently have 18.10.461

 

[SteveITS]

https://www.3cx.com/blog/news/desktopapp-security-alert-updates/

The version shows on the Phones tab while the app is running.

 

[dbm-ntwt]

Thanks, but I must be missing something, as I don't see it anywhere on either the phone app with or without the BLF, nor the other window (I checked all tabs):

 

[Guillaume Bourgeois]

On TAB « Phones » in 3CX Dashboard page, When users have their apps open.

 

[MiraG_3CX]

Thanks for all the effort.
But I can't stop wondering why 3CX recommends using the PWA app instead of the new build electron app?!

We strongly recommend using the PWA for several reasons.

Firstly, the PWA is much safer since it runs in your browser sandbox. This means that it is isolated from other processes and applications, providing an extra layer of security to protect your data.

Secondly, the PWA requires less administration from the IT team of our partner since it auto-updates. This means that our partner's IT team can focus on other important tasks instead of constantly updating the app.

 

[jed]

Hi Team 3CX

Great work with the new DesktopApp
It would be great if the DesktopApp was marked "for Windows" and "for MAC" to ease the sorting in the Management.

 

[SweetAction]

Hi Team 3CX

Great work with the new DesktopApp
It would be great if the DesktopApp was marked "for Windows" and "for MAC" to ease the sorting in the Management.

View attachment 35094

Great idea. If you post it in the ideas forum I would vote for it.

 

[Fred Jelk | PC-Profi GmbH]

Thanks, but I must be missing something, as I don't see it anywhere on either the phone app with or without the BLF, nor the other window (I checked all tabs):

View attachment 35086

Click on the BLF-enable-button
.

 

[Chris Walters]

We strongly recommend using the PWA for several reasons.

Firstly, the PWA is much safer since it runs in your browser sandbox. This means that it is isolated from other processes and applications, providing an extra layer of security to protect your data.

Secondly, the PWA requires less administration from the IT team of our partner since it auto-updates. This means that our partner's IT team can focus on other important tasks instead of constantly updating the app.

Hi @MiraG_3CX ,

Is there a timeline for BLFs, Hotkeys, and Click to Dial functionality for the PWA? Without those features, my clients would revolt.

Best,

Chris

 

[Fred Jelk | PC-Profi GmbH]

Hi @MiraG_3CX ,

Is there a timeline for BLFs, Hotkeys, and Click to Dial functionality for the PWA? Without those features, my clients would revolt.

Best,

Chris

sure, there is... take a look at https://www.3cx.com/blog/news/pwa-vs-windows-legacy-app/ from 2023.03.31...
Quote: "...What PWA will be able to do next week: Current dialer will include the BLF view..."

​

 

[MiraG_3CX]

Hi @MiraG_3CX ,

Is there a timeline for BLFs, Hotkeys, and Click to Dial functionality for the PWA? Without those features, my clients would revolt.

Best,

Chris

as mentioned here: https://www.3cx.com/blog/releases/v18u7a-security-update/ we should get the update in the coming week!

 

[CFP]

can we as admins of these 3CX boxes have the ability to prevent end users downloading and installing the windows clients from the webclient. - it's one of the most annoying things about this system as we don't want or trust end users to install or "self manage" the software on their machines.

 

[Kenneth Geets]

Just this message to let you know that SentinelOne has started flagging the 18.12.425 msi installer as malicious (again).

The application itself, once installed, seems to keep working and does not get flagged even after a restart.