3CX DesktopApp Security Alert
In the news
- 3CX: https://www.3cx.com/blog/news/desktopapp-security-alert
- Trend Micro: https://www.trendmicro.com/en_us/research/23/c/information-on-attacks-involving-3cx-desktop-app.html
- Crowd Strike: https://www.crowdstrike.com/blog/crowdstrike-detects-and-prevents-active-intrusion-campaign-targeting-3cxdesktopapp-customers/
- 3CX appoints 3rd party to investigate issue https://www.3cx.com/blog/news/desktopapp-security-alert-updates/ (30/03/23)
What Mear Technology have done for our clients
30/03/23 am Identified all machines we manage with 3CX Desktop app 18.12.407 & 18.12.416.
30/03/23 am Removed the affected version of 3CX desktop app on all clients and installed Web App (PWA) version. Sent a secure message directly to affect staff with instructions on what to do. Staff will need to Activate this install.
30/03/23 pm forced a full scan of all machines that received
30/03/23 pm patched all phone systems
What else can we tell you?
All our customers using our Managed Antivirus will be glad to know that the infection was picked up by our Antivirus blocked and cleaned at the point of deployment.
How to activate/Install 3CX Web App (PWA)
To do this please log in to your webclient details can be found in your 3CX Welcome email
Click Apps (bottom left corner)
Click Web App (PWA)
Click install