Where do I find information related to 3CX Desktop Application compromise?

Products

• Carbon Black App Control (formerly Cb Protection)
• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)
• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Where do I find information related to 3CX Desktop Application compromise?

Environment

All Products

Resolution

Carbon Black threat researchers have been and continue to investigate the situation to best understand the scope, impact, and provide potential responses leveraging CB tools. Below is the information currently available and this KB will be updated as more become available

https://community.carbonblack.com/t5/Threat-Research-Docs/3CX-Compromise-a-k-a-Smooth-Operator/ta-p/117836

https://blogs.vmware.com/security/2023/03/investigating-3cx-desktop-application-attacks-what-you-need-to-know.html