3CX VOIP Compromised in March 2023 Supply Chain Attack
Channel: Lawrence Systems
Date: 2023-03-30

Huntress Blog
https://www.huntress.com/blog/3cx-voip-software-compromise-supply-chain-threats

@_JohnHammond video on the topic https://youtu.be/ILhd-Bdrr_g

Crowdstrike
https://www.reddit.com/r/crowdstrike/comments/125r3uu/20230329_situational_awareness_crowdstrike/

3CX forum pots
https://www.3cx.com/community/threads/3cx-desktopapp-security-alert.119951/page-3

SentinelOne Posts
https://www.sentinelone.com/blog/smoothoperator-ongoing-campaign-trojanizes-3cx-software-in-software-supply-chain-attack/

Connecting With Us
---------------------------------------------------  
+ Hire Us For A Project: https://lawrencesystems.com/hire-us/
+ Tom Twitter 🐦 https://twitter.com/TomLawrenceTech
+ Our Web Site https://www.lawrencesystems.com/
+ Our Forums https://forums.lawrencesystems.com/
+ Instagram https://www.instagram.com/lawrencesystems/
+ Facebook https://www.facebook.com/Lawrencesystems/
+ GitHub https://github.com/lawrencesystems/
+ Discord https://discord.gg/ZwTz3Mh

Lawrence Systems Shirts and Swag
---------------------------------------------------
►👕 https://lawrence.video/swag


AFFILIATES & REFERRAL LINKS
---------------------------------------------------
Amazon Affiliate Store
🛒 https://www.amazon.com/shop/lawrencesystemspcpickup

All Of Our Affiliates that help us out and can get you discounts!
🛒 https://www.lawrencesystems.com/partners-and-affiliates/

Gear we use on Kit 
🛒 https://kit.co/lawrencesystems

Use OfferCode LTSERVICES to get 10% off your order at
🛒 https://lawrence.video/techsupplydirect

Digital Ocean Offer Code
🛒 https://m.do.co/c/85de8d181725

HostiFi UniFi Cloud Hosting Service
🛒 https://hostifi.net/?via=lawrencesystems

Protect you privacy with a VPN from Private Internet Access
🛒 https://www.privateinternetaccess.com/pages/buy-vpn/LRNSYS

Patreon
💰 https://www.patreon.com/lawrencesystems

⏱️ Time Stamps ⏱️
00:00 3CX Compromise 
01:07 Crowdstrike Post Alerting of The Compromist
03:36 Huntress and John Hammond Analysis 
06:03 C2 Server list & Deliver Mechanisms
08:55 Attribution
10:50 3CX Response

#3cx #cybersecurity