Cyber Defense Advisors

Automatic Updates Deliver Malicious 3CX ‘Upgrades’ to Enterprises

In a Solar Winds-like attack, compromised, digitally signed versions of 3CX DesktopApp are landing on user systems via the vendor’s update mechanism.