Red flags flew over software supply chain-compromised 3CX update

ReversingLabs is analyzing a supply chain compromise of the firm 3CX Ltd., a maker of enterprise voice over IP (VOIP) solutions. Beginning on March 22nd, 2023, compromised versions of the 3CXDesktopApp, a desktop client version of the company’s VoIP software, were found to contain malicious code. 

3cx 3cxdesktopapp client code compromise compromised desktop enterprise malicious march reversinglabs software software supply chain software supply chain security solutions supply supply chain supply chain compromise the company threat research update version voice voip