CERT24The Huge 3CX Breach Was Actually Two Linked Supply Chain AttacksLoading data…
CERT24Threat Observatory
Period

The Huge 3CX Breach Was Actually Two Linked Supply Chain Attacks

According to Mandiant, 3CX was itself compromised through an earlier software supply-chain attack. Hackers inserted backdoor code into Trading Technologies’ X_Trader application; after the infected application was installed on a 3CX employee’s computer, the attackers moved through the 3CX network, compromised a 3CX installer, and distributed corrupted software to a broad portion of its customers.

← Back to intelligence

The Huge 3CX Breach Was Actually Two Linked Supply Chain Attacks

According to Mandiant, 3CX was itself compromised through an earlier software supply-chain attack. Hackers inserted backdoor code into Trading Technologies’ X_Trader application; after the infected application was installed on a 3CX employee’s computer, the attackers moved through the 3CX network, compromised a 3CX installer, and distributed corrupted software to a broad portion of its customers.