Supply Chain Attack via a Trojanized Comm100 Chat Installer

Originally published by CrowdStrike. Leveraging a combination of advanced machine learning and artificial intelligence, a new supply chain attack was identified during the installation of a chat-based customer engagement platform. The supply chain attack involved a trojanized installer for the Comm100 Live Chat application being deployed. Malware was delivered via a signed Comm100 installer that could be downloaded from the company’s website as recently as the morning of September 29, 2022. W...

attack chat comm100 installer supply supply chain supply chain attack