Record · corpus.blog/posts/01a087dd-bff6-7185-8e0b-ea874cb461d4

Recommendations and Lessons Learned from the 3CX Attack (2023)

securityinaction.wordpress.com · published 16 April 2023

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at securityinaction.wordpress.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 20
Words captured: 534

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://blog.cyble.com/2023/03/31/a-comprehensive-analysis-of-the-3cx-attack/

blog.cyble.com

Not just an infostealer: Gopuram backdoor deployed through 3CX supply chain attack Read at the source ↗

securelist.com

https://news.sophos.com/en-us/2023/03/29/3cx-dll-sideloading-attack/

news.sophos.com

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2013-3900

msrc.microsoft.com

https://www.darkreading.com/attacks-breaches/3cx-breach-cyberattackers-second-stage-backdoor

darkreading.com

https://twitter.com/laltimmy/status/1642489400306147328

twitter.com

https://vcsjones.dev/authenticode-stuffing-tricks/

vcsjones.dev

https://www.synopsys.com/blogs/software-security/software-bill-of-materials-bom/

synopsys.com

https://www.3cx.com/blog/news/security-incident-updates/

3cx.com

https://www.3cx.com/blog/news/desktopapp-security-alert/

3cx.com

https://www.fortinet.com/blog/threat-research/3cx-desktop-app-compromised

fortinet.com

https://digital.nhs.uk/cyber-alerts/2023/cc-4291

digital.nhs.uk

https://www.securityweek.com/3cx-supply-chain-attack-north-korean-hackers-likely-targeted-cryptocurrency-firms/

securityweek.com

https://www.securityweek.com/mandiant-investigating-3cx-hack-as-evidence-shows-attackers-had-access-for-months/

securityweek.com

https://twitter.com/wdormann/status/1642156921737060352

twitter.com

https://www.bleepingcomputer.com/news/security/3cx-confirms-north-korean-hackers-behind-supply-chain-attack/

bleepingcomputer.com

https://www.bleepingcomputer.com/news/security/cryptocurrency-companies-backdoored-in-3cx-supply-chain-attack/

bleepingcomputer.com

https://www.bleepingcomputer.com/news/microsoft/10-year-old-windows-bug-with-opt-in-fix-exploited-in-3cx-attack/

bleepingcomputer.com

https://www.bleepingcomputer.com/news/security/hackers-compromise-3cx-desktop-app-in-a-supply-chain-attack/

bleepingcomputer.com

https://therecord.media/north-korea-hackers-linked-to-3cx-attack

therecord.media