N.K. Hackers Employ Matryoshka Doll-Style Cascading Supply Chain Attack on 3CX

The attack against 3CX first came to light on March 29, 2023, when it emerged that Windows and macOS versions of its communication software were trojanized to deliver a C/C++-based data miner named ICONIC Stealer by means of a downloader, SUDDENICON.