3CX and Trading Technologies supply chain attack (Incident)
ID: 1e84827b-ac4c-52a3-98b7-482da13df006
STIX ID: report--1e84827b-ac4c-52a3-98b7-482da13df006
Feed Name: Wiz Cloud Threat Landscape
Date Published: 2023-03-29
Date Updated: 2026-05-01
Author: [email protected] (Wiz Threat Research)
In March 2023 a North Korean APT known as "SmoothOperator" compromised the 3CX desktop application via a software supply-chain attack (traced back to a November 2021 compromise of Trading Technologies), inserting a backdoor used to target customers—primarily cryptocurrency firms; multiple security vendors and 3CX published incident details and recommended mitigations such as preferring web apps and enforcing application allowlisting.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.