Pondurance is actively tracking the on-going supply chain attack campaign aimed at the software-based phone system 3CX.  WHAT WE KNOW Posted by our trusted partner, Crowdstrike, “On March 29, 2023 Falcon OverWatch observed unexpected malicious activity emanating from a legitimate, signed binary, 3CXDesktopApp — a softphone application from 3CX. The malicious activity includes beaconing to

History of the Breach LastPass first disclosed details of the breach in August 2022, and they have issued several updates over the past months with the most recent being just before Christmas (Dec 22 2022). Here is a summary of each disclosure on that timeline: August 25, 2022 Unauthorized party gained access to parts of