Automatic Updates Deliver Malicious 3CX 'Upgrades' to Enterprises

In a Solar Winds-like attack, compromised, digitally signed versions of 3CX DesktopApp are landing on user systems via the vendor's update mechanism.

3cx attack automatic compromised desktopapp enterprises landing malicious solar solar winds systems update updates vendor