Threat Source newsletter (April 6, 2023) — Another friendly reminder about supply chain attacks

Welcome to this week’s edition of the Threat Source newsletter.

It seems like we can’t go a full calendar year without a major supply chain attack. In late 2020 we had the SolarWinds incident (which, doesn’t that somehow seem like five years ago but also yesterday?), then the REvil ransomware group infiltrating the Kaseya VSA software in the summer of 2021 and last week we had another attack targeting the 3CX Desktop Softphone application.

For now, the adversaries behind the …

3cx adversaries application april attack attacks calendar desktop incident kaseya kaseya vsa major newsletter ransomware ransomware group reminder revil revil ransomware revil ransomware group software solarwinds summer supply supply chain supply chain attack supply chain attacks targeting threat threat source threat source newsletter vsa