Commercial Chat Provider Comm100 Hijacked to Spread Malware in Supply Chain Attack

The attack featured a trojan malware delivered via an installer for Comm100’s Windows Desktop agent software, available on the company website and signed using a valid Comm100 certificate dated September 26, 2022, according to Crowdstrike.