Vulnerabilityhigh
Cryptocurrency Companies Targeted in Sophisticated 3CX Supply Chain Attack
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2013-3900 | Authenticode Signature Verification Flaw in Microsoft WinVerifyTrust (RCE) | 5.5 | 45% | KEV | KEV |
| CVE-2023-29059 | 3CX DesktopApp through 18.12.416 has embedded malicious code, as exploited in the wild in March 2023 | 7.8 | 4% | PoC ×4 |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | wirexpro.com | sky further said it identified a C2 overlap with a server ("wirexpro[.]com") that was previously identified as employed in an AppleJ |
From the original article
3 min read at thehackernews.com
Ravie Lakshmanan Apr 04, 2023 Cryptocurrency / Cyber Attack The adversary behind the supply chain attack targeting 3CX deployed a second-stage implant specifically singling out a small number of cryptocurrency companies.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.