Security Advisory 3CX Supply Chain
ID: 83aa2252-1a9a-5c9a-ab26-2553f1cef5f1
STIX ID: report--83aa2252-1a9a-5c9a-ab26-2553f1cef5f1
Feed Name: Zscaler Security Research Blog
Threat Score
The 3CX Electron Desktop App was distributed with an infected ffmpeg.dll that downloads an encrypted d3dcompiler_47.dll; this component retrieves .ico files from GitHub containing C2 domains used to deliver a final payload, enabling attacker activity in victim environments. The activity has been observed since February and a fuller analysis is forthcoming.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.