3CX - Security Vulnerability /Threat Actor Intrusion discovered within 3CX Desktop App(Windows/Mac)

Resolved
Resolved

3CX have now updated their incident and confirm all issues have been resolved, therefore we are closing off this incident. Thanks for your patience.

Identified

3CX have made the community aware of a security vulnerability within the 3CX Windows/Mac Desktop app that exposes systems to potential harm when used.

Mitigation measures have already been put in place by 3CX and relevant authorities to shutdown the networks the software was designed to talk to.

At pckwikfix, some of our cyber protection systems will have stopped this intrusion anyway, though we have carried out work this morning to remove any of the affected apps and installers for all clients under an IT maintenance agreement.

Please note there is no reports of any impact on any users and 3CX are currently monitoring and updating the incident as it continues.

Please contact us if you have any concerns or questions. Alternatively, 3CX blog entry is here: https://www.3cx.com/blog/news/desktopapp-security-alert/

Began at:

Affected components
  • Kwikvoice VoIP Platform