Cybersecurity incident — 2023-04-20 00:00:00
Affected organization: 3CX
Affected country: United States of America
Industry: Transportation and Warehousing
Event type: Exploitive
Event subtype: Exploitation of Network Infrastructure
Motive: Financial
Actor: UNC4736
Actor type: Criminal
Actor country: Korea (the Democratic People's Republic of)

Researchers from Mandiant reveal that the 3CX supply chain attack was caused by another supply chain compromise where suspected North Korean attackers breached the site of stock trading automation company Trading Technologies to push trojanized software builds.