ReversingLabs blog
3CX compromise (mentioned in "How to assess and manage commercial software risk") · 2024-06-10T05:00:00.000Z
First, the North Korean threat group Lazarus compromised the endpoint client of 3CX, a VoIP software vendor, in a first-of-its-kind cascading attack that delivered malware to thousands of its customers.