Security-X

Forum Security-X => News => Discussion démarrée par: igor51 le avril 21, 2023, 04:01:29

Titre: [kreb]3CX Breach Was a Double Supply Chain Compromise
Posté par: igor51 le avril 21, 2023, 04:01:29

3CX Breach Was a Double Supply Chain Compromise

We learned some remarkable new details this week about the recent supply-chain attack on VoIP software provider 3CX, a complex, lengthy intrusion that has the makings of a cyberpunk spy novel: North Korean hackers using legions of fake executive accounts on LinkedIn to lure people into opening malware disguised as a job offer; malware targeting Mac and Linux users working at defense and cryptocurrency firms; and software supply-chain attacks nested within earlier supply chain attacks.
Source: 3CX Breach Was a Double Supply Chain Compromise (https://krebsonsecurity.com/2023/04/3cx-breach-was-a-double-supply-chain-compromise/)