Network Security News Summary for Friday March 31st, 2023
Channel: Internet Storm Center Stormcast
Date: 2023-03-30

Malicious 3CX Desktop App Update; Reverse Engineering Obfuscated Powershell via Debugger

Malicious 3CX Dekstop App Update
 Lifestream (Friday March 31st 1400 ET, 1800 UTC) https://www.youtube.com/watch?v=cCf3Km_j5bY
 3CX Update: https://www.3cx.com/blog/news/desktopapp-security-alert/
 SentinelOne: https://www.sentinelone.com/blog/smoothoperator-ongoing-campaign-trojanizes-3cx-software-in-software-supply-chain-attack/
 Objective-See Blog Post: https://objective-see.org/blog/blog_0x73.html
 Crowdstrike: https://www.crowdstrike.com/blog/crowdstrike-detects-and-prevents-active-intrusion-campaign-targeting-3cxdesktopapp-customers/

Bypassing PowerShell Strong Obfuscation
 https://isc.sans.edu/diary/Bypassing%20PowerShell%20Strong%20Obfuscation/29692

keywords: 3cx; voip; supply chain; powershell; obfuscation