Threat Source newsletter (April 6, 2023) — Another friendly reminder about supply chain attacks
Summary: Cisco Talos reported that the 3CX Desktop Softphone application was hit by a supply chain attack, following SolarWinds in late 2020 and REvil's infiltration of Kaseya VSA in summer 2021; 3CX claims over 600,000 customers and 12 million daily users. Talos said the adversaries behind the 3CX attack appear mainly focused on infiltrating cryptocurrency companies and exchanges to steal money, and that the full scale of the attack is not yet known.
What's compelling: 3CX's 12 million daily users and 600,000 customers make the unreported full scope of this attack the number to watch, and the pattern of SolarWinds, Kaseya and now 3CX shows trusted software updates remain a reliable path into victim networks.
Read the original at Cisco Talos ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026