[kwlug-disc] 3CX Win/Mac apps used as attack vector

[Chris Irwin]

I believe 3CX has come up in discussion previously as a VOIP provider some KWLug users either use, or have evaluated (Probably in-person years ago, or during meetings as I didn't see much in my mail history).

FYI, if you use 3CX, and specifically their Windows/Mac desktop apps, it has been compromised and apparently actively exploited.

https://arstechnica.com/information-technology/2023/03/massive-supply-chain-attack-with-ties-to-north-korea-hits-users-of-3cx-voice-app/

This isn't a Linux-related issue, but I think there are enough IT/Sysadmin types on here that this might be relevant news to get out there.

--
*Chris Irwin*

email:   chris at chrisirwin.ca
  web: https://chrisirwin.ca
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://kwlug.org/pipermail/kwlug-disc_kwlug.org/attachments/20230330/546534da/attachment.htm>