False positive Zscaler EDR alert for 3CX CFD

[TheodorosG_3CX]

We have been contacted regarding alerts for the 3CX Call Flow Designer reported as infected by a vendor called Zscaler.

A ticket with the number: 1124933, has been opened with the vendor. At this point it seems to be a False/Positive alert and we are awaiting a reply from Zscaler. Once this has been received further updates will be posted here.

Our communication will remain transparent throughout this investigation.

 

[NikosT_3CX]

Zscaler has yet to respond to our request. We sent a follow-up to resolve this matter as soon as possible.
Once received we will update this forum thread.

 

[NikosT_3CX]

We established communication with the Vendor.

Zscaler stated that it seems to be a False Positive. This is the only alert which they have received regarding 3CX CFD.

In order to provide a conclusive statement, the logs and the policies from the specific customer's portal must be checked by the vendor. They are now waiting for the information from the customer.

Further updates will be provided.

 

[NikosT_3CX]

We are marking this alert as False Positive, as we have not received any confirmation from the Vendor.

 

[TheodorosG_3CX]

We have received a confirmation from Zscaler that this is a False/Positive and this forum thread will be closed:

"Regarding the case: 04170729 : 3CX

I got update from security team , that this was a false positive and the block is removed .
Please try to access , if you face any issue do let me know.

Looking forward for your update"