Update: 3CX confirms North Korean hackers behind supply chain attack

The North Korea-linked attackers infected 3CX systems with malware known as Taxhaul (or TxRLoader), which deployed a second-stage malware downloader named Coldcat by Mandiant.