The rise of malware in the software supply chain – and what to do about it

The fast-evolving story of the compromise of voice over IP (VoIP) provider 3CX has refocused attention on the threat posed by software supply chain compromises. 3CX’s desktop client were tampered with by state-sponsored hackers. The company’s Windows and macOS build environments were compromised, and a backdoor added to the desktop client’s code. The update was then signed and pushed to customers. 

3cx attention backdoor build client code compromise compromised customers desktop environments fast hackers macos malware rsac2023 s code software software supply chain software supply chain security sponsored state story supply supply chain the company threat update voice voip windows