Caution When Using 3CX DesktopApp (CVE-2023-29059)

Overview

Details about how supply chains were attacked through the 3CX DesktopApp were published. [1] This software provides users with various communication functions, such as voice calls and video conferences, and can be operated on both Windows and MAC operating systems. Currently, the 3CX company is preparing to issue a new certificate, and until then, they are instructing users to use an alternative software.

Description

Regarding this, the distributed malware are confirmed to include modules that perform malicious functions and …

3cx 3cxdesktopapp certificate communication conferences cve cve-2023-29059 desktopapp distributed files functions installation issue mac malicious malware malware analysis modules msi operating systems software supply supply chains systems video voice windows