News

Supply chain attack targets millions of phone system users through trojanized 3CX app

Cybersecurity firms have been warned of a supply chain attack targeting downstream customers using a trojanized 3CX software

Supply chain attack targets millions of phone system

Multiple cybersecurity firms have warned of a supply chain attack using a trojanized version of 3CX's software to target downstream customers. 

3CX is a phone system developer used by more than 600,000 organizations worldwide, including American Express, BMW, McDonald’s, and the U.K.'s National Health Service. The attack, dubbed "Smooth Operator," involves the delivery of trojanized 3CXDesktopApp installers to install infostealer malware inside corporate networks, capable of stealing data and stored credentials from Google Chrome, Microsoft Edge, Brave, and Firefox user profiles. 

Researchers report that attackers are targeting both the Windows and macOS versions of the compromised VoIP app. The Linux, iOS, and Android versions appear to be unaffected. The attackers are believed to be the North Korean threat actor Labyrinth Chollima, a subgroup of the notorious Lazarus Group. It appears to be a targeted attack from an Advanced Persistent Threat, perhaps even state-sponsored. 

If you are a 3CX user, the company suggests uninstalling the app and installing it again or using its PWA client as a workaround. While we don't know how many organizations have been potentially compromised, Shodan.io reports that there are currently over 240,000 publicly exposed 3CX phone management systems. 

Stay vigilant and take immediate action if you suspect any suspicious activity.

Manish <span>Content Strategist</span>
Written By
Manish Content Strategist

With a mixture of literature, cinema, and photography, Manish is mostly traveling. When he is not, he is probably writing another tech news for you!

Want To Hire The Best Service Provider?
MobileAppDaily will help you explore the best service providers depending on your vision, budget, project requirements and industry. Get in touch and create a list of best-suited companies for your needs.

Featured Success Stories

News

Everything You Want To Know About Android P Developer Preview 3

4 min read  

Since the official release of Android P, Google has rolled out a couple of its testing previews, which have brought new features and capabilities for users and developers. A lot of new elements were infused in the Google I/O 2018, that incorporate behavior changes to help improve battery life, secur

News

You Can Now Make ChatGPT Behave To Your Taste, Mood & More!

4 min read  

ChatGPT is one of the most viral sensations across the globe. Built by OpenAI, this platform is one of the most advanced AI platforms available for public use till now. But, the efficiency of intelligence goes a step further as the makers of the platform have launched a game changing feature for all

News

Everything About iOS 12 Features and iOS 12.4 Release Date

4 min read  

iOS 12.4 is expected to be rolled out before the commencement of WWDC, as it has not been officially announced.Currently, iOS 12.3 is the latest and the stable version of the iOS operating system until the time iOS 12.4 is not released, but it is anticipated to come out by June 3.However, iO

News

Snapchat Rebuilds Android App, Introduces New Features To Fight Instagram

4 min read  

Snapchat has recently announced its new Snapchat Android app. Snapchat has rebuilt its app in an effort to make its Android version up to par with the iOS version.The work on this update has been going on since 2018. The new Snap app for Android platforms is just similar to Snapchat’s old

Featured Success Interview

Interview

Interview With Coyote Jackson, Director of Product Management, PubNub

MAD Team 4 min read  

MobileAppDaily had a word with Coyote Jackson, Director of Product Management, PubNub. We spoke to him about his journey in the global Data Stream Network and real-time infrastructure-as-a-service company. Learn more about him.

Interview

Interview With Laetitia Gazel Anthoine, Founder and CEO, Connecthings

MAD Team 4 min read  

MobileAppDaily had a word with Laetitia Gazel Anthoine, Founder and CEO, Connecthings. We spoke to her about her idea behind Connecthings and thoughts about the company’s services.

Interview

Interview With Gregg Temperley, Founder Of ParcelBroker App

MAD Team 4 min read  

MobileAppDaily had a word with Gregg Temperley, Founder. We spoke to him about his idea behind such an excellent app and his whole journey during the development process.

App Development

How to Implement Artificial Intelligence and Machine Learning in an Existing App?

MAD Team 11 min read  

AI is for decision making, and ML makes the system to learn new things from data.

MAD Originals
MAD Originals

Cut to the chase content that’s credible, insightful & actionable.

Get the latest mashup of the App Industry Exclusively Inboxed

  • PRODUCTS
  • SERVICES
  • BOTH
Join our expansive network, build connections and expand your brand presence.