3CX Supply Chain Attack Tied to Financial Trading App Breach

Mandiant found that North Korea's UNC4736 gained initial access on 3CX's network when an employee downloaded a weaponized but legitimately-signed app from Trading Technologies.

3cx access app attack breach employee financial initial access korea mandiant network north north korea supply supply chain supply chain attack technologies trading trading technologies