Data breachcritical
N.K. Hackers Employ Matryoshka Doll-Style Cascading Supply Chain Attack on 3CX
- CVEs
- CVE-2022-0609
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-0609 | Use-After-Free in Google Chromium Animation Component (Chrome, Edge, Opera) | 8.8 | 22% | KEV | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | journalide.org | iscovery of an overlapping command-and-control (C2) domain (journalide[.]org) employed in the supply chain attack and that of a Lazaru |
| domain | tradingtechnologies.com | -day flaw in Google Chrome ( CVE-2022-0609 ). "The site www.tradingtechnologies[.]com was compromised and hosting a hidden IFRAME to exploit vi |
From the original article
4 min read at thehackernews.com
The supply chain attack targeting 3CX was the result of a prior supply chain compromise associated with a different company, demonstrating a new level of sophistication with North Korean threat actors. Google-owned Mandiant, which is tracking the attack event under the moniker UNC4736 , said the incident marks the first time it has seen a "software supply chain attack lead to another software supply chain attack."
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.