SecureLayer7

In March this year, a massive 3CXDesktopApp supply chain attack disrupted the BAU for international organizations. 3CX, the enterprise offering that built the video and voice conferencing software has over 600,000 customer companies, with over 12 million daily users across 190 countries.

The impact of the attack, including financial and data loss is severe. Businesses are cautioned to be vigilant. If you run the compromised versions of 3CX, we recommend you to ensure the following steps;

1. Ensure that no detection exception is configured in your security solutions (EDR, AV, etc.)
2. Make sure all detection tools are updated with appropriate rules and Indicators of Compromise (IoC)
3. Upgrade 3XC apps to the latest version - 18.12.422 or uninstall in favor of a PWA web-only solution
4. If the app is compromised, uninstall and reinstall

Read more about 3CXDesktopApp here: https://blog.securelayer7.net/3cx-supply-chain-campaign-technical-analysis/

3CX Supply Chain Campaign Technical analysis and POC On March 29th, 2023, the cybersecurity world was alerted to a troubling issue - the 3CXDesktopApp had been compromised. The implications of this supply chain campaign are significant, given the global distribution of various Trojanized versions of their VOIP software. This attack has impacted Window...

According to World Economic Forum, cybercrime, and cyber insecurity rank 8th in terms of severity of impact.

The Global Cybersecurity Outlook 2023 by WEF also found that 93% of cybersecurity experts and 86% of business leaders believe that global instability will have a negative impact on ensuing cybersecurity over the next two years. And that makes security a national priority for every country.

🔒 Webinar Alert 🔒
Are you concerned about the security of your OAuth2.0 implementation?

Join us for our upcoming webinar, "Hacking OAuth2.0: Beyond The Basics", on 9th March 2023 at 11 AM IST.

Register now and secure your spot! 👇
https://infosec.securelayer7.net/webinar_oauth