@sebsauvage
Corruption de la chaîne d'approvisionnement chez l'éditeur de softphone #3cx

Plusieurs utilisateurs indiquent que leurs mot de passe stocke dans leur navigateur ont été volé et utilisé
Les DSI de grosse entreprise comme Pepsi et Mercedes sont très remonté

Le temps de valider l'alerte chez nous, désinstallation en catastrophe de #3cxdesktopapp sur l'ensemble du parc en attendant lundi
#3cxapocalypse

https://www.huntress.com/blog/contextualizing-events-enabling-defense-what-3cx-means

Originally posted by The Hacker News / @TheHackersNews: http://nitter.platypush.tech/TheHackersNews/status/1641737567715438592#m

R to @TheHackersNews: The attack appears to have compromised 3CX's software build pipeline to distribute Windows and #macOS versions of the app package or poisoned an upstream dependency. The scale of the attack is currently unknown. 🔎

#cybersecurity #3CX #3CXpocalypse #3CXDesktopApp

Active supply chain attack targets popular voice and video conferencing software #3CXDesktopApp, affecting hundreds of well-known brands and millions of users.

https://thehackernews.com/2023/03/3cx-desktop-app-targeted-in-supply.html

#cybersecurity #hacking #infosecurity

📢 SentinelOne has dubbed the attack "Smooth Operator," while CrowdStrike suspects the involvement of a North Korean government-state actor known as LABYRINTH CHOLLIMA.

Read more: https://www.hackread.com/3cx-desktop-app-supply-chain-attack/

#Security #3CX #3CXDesktopApp #CyberAttack #Cybersecurity

Referenced link: https://thehackernews.com/2023/03/3cx-desktop-app-targeted-in-supply.html
Discuss on https://discu.eu/q/https://thehackernews.com/2023/03/3cx-desktop-app-targeted-in-supply.html

Originally posted by The Hacker News / @TheHackersNews: http://nitter.platypush.tech/TheHackersNews/status/1641423529274134529#m

⚠️ 🚨 Active supply chain attack targets popular voice and video conferencing software #3CXDesktopApp, affecting hundreds of well-known brands and millions of users.

Learn more: https://thehackernews.com/2023/03/3cx-desktop-app-targeted-in-supply.html

#cybersecurity #hacking #infosecurity