The 3CX app is a private automatic branch exchange (PABX) software that provides several communication functions for its users, including video conferencing, live chat, and call management. For more information on how to utilize Trend Micro Vision One features, you may download the PDF guide here.Īdditional guidance for Trend Micro customers including help with protection and detection can be found on our support page. Trend Micro customers can also take advantage of Trend Micro Vision One™ to search for and monitor potential threats associated with the 3CX Desktop App, and to better understand observed attack vectors. By applying XDR analytics to the data gathered from its native products, Trend Micro XDR generates correlated and actionable alerts.
The company also mentioned that they are working on an update to the desktop app.įor a more comprehensive scope of protection against possible attacks associated with the 3CX Desktop App, the Trend Micro XDR platform can help organizations mitigate the impact by collecting and analyzing extensive activity data from various sources. On its forums, 3CX has posted an update that recommends uninstalling the desktop app and using the Progressive Web App (PWA) client instead. In late March 2023, security researchers revealed that threat actors abused a popular business communication software from 3CX - in particular, the reports mention that a version of the 3CX VoIP (Voice over Internet Protocol) desktop client was being employed to target 3CX's customers as part of an attack. EDT: We added the execution flow diagram, a link to Trend Micro support page, and a list of Mac IOCs and detection names. EDT: We added technical details, an analysis of the info-stealer payload, and information on Trend Micro XDR capabilities for investigating and mitigating risks associated with the 3CX desktop app.
EDT: We added a guide on how Vision One can be used to search for potential threats associated with the 3CX desktop app. EDT: We added details on d3dcompiler_47.dll 's abuse of CVE-2013-3900 to make it appear legitimately signed.
EDT: We added Trend Micro XDR filters to the solutions. EDT: We added Windows, Mac, and network commands to the Trend Micro Vision One™️ guide in the linked PDF.
0 kommentar(er)
