North Korean Hackers Uncovered as Mastermind in 3CX Supply Chain Attack

🗓️ 12 Apr 2023 04:06:00Reported by The Hacker NewsType

North Korean hackers exposed as mastermind behind 3CX supply chain attack. Google-owned Mandiant interim assessment uncovers threat actor UNC4736, Lazarus sub-group Labyrinth Chollima linked to attack. Multiple malware strains detected, including ICONIC Stealer and Gopuram, leading to further attacks on crypto companies. DLL side-loading used for persistence on Windows. MacOS systems backdoored using SIMPLESEA malware. 3CX working on strengthening security measures

Reporter	Title	Published	Views	Family All 24
Tenable Nessus	3CX DesktopApp Malware	30 Mar 202300:00	–	nessus
ATTACKERKB	CVE-2023-29059	30 Mar 202300:00	–	attackerkb
BDU FSTEC	The vulnerability of the 3CX Electron Desktop App for messaging and video conferencing software for Windows and macOS operating systems allows a hacker to execute arbitrary code.	13 Apr 202300:00	–	bdu_fstec
Circl	CVE-2023-29059	30 Mar 202320:21	–	circl
CNNVD	3CX 安全漏洞	30 Mar 202300:00	–	cnnvd
CVE	CVE-2023-29059	30 Mar 202300:00	–	cve
Cvelist	CVE-2023-29059	30 Mar 202300:00	–	cvelist
EUVD	EUVD-2023-32662	3 Oct 202520:07	–	euvd
NVD	CVE-2023-29059	30 Mar 202317:15	–	nvd
OSV	CVE-2023-29059	30 Mar 202317:15	–	osv