3CX

3CX is a company that develops the 3CX Phone System and 3CX WebMeeting, which works exclusively through a network of partners. The global presence of the company is provided by 3CX offices in the USA, Great Britain, Germany, Gong Kong, South Africa and Russia.

3CX Phone System for Windows is a software platform for unified communications based on open standards. 3CX Phone System reduces communication costs by increasing employee productivity and mobility through functional customers for, iOS,, and Android. Mac Windows More than 30,000 customers, including companies such as Boeing McDonalds, Hugo Boss, Ramada Plaza Antwerp, Harley Davidson, Wilson Sporting Goods and Pepsi, have already chosen the 3CX Phone System.

Business in Russia

The company 3CX the international developer of virtual IP PBX for the Windows platform in the fall of 2012 made a strategic decision to create a representative office "3CX - Russia." The mission to fulfill the functions of an official representative is entrusted to ICE Partners, a Russian integrator of VoIP solutions. The experience of many years of successful implementation of commercial solutions based on the 3CX Phone System software telephone exchange will allow ICE Partners to organize high-quality work of the representative office in Russia. Thus, 3CX plans to cover the growing market of communications services in Russia as quickly as possible.

With the opening of the 3CX-Russia representative office, Russian companies will have direct support for the developer of the popular 3CX Phone System telephone exchange. This will reduce the response time between the IP station user and the developer's service support.

Also for Russian business, in particular for medium and small enterprises, special offers are planned - flexible, scalable licenses. Taking into account the comprehensive offer (hardware + software + service), the offer of such a package will be the most attractive for many Russian enterprises planning to expand or opening branches in other regions of Russia.

• ICE Partners is the official distributor of 3CX in Russia. ICE Partners is a dynamic IT company founded in early 2008. The main areas of activity, IP telephony, integration solutions and development in the field of VoIP based on the products of the 3CX laboratory. The main priorities are the latest technologies that minimize customer costs.

History

2023: Cyberattack on 3CX hacked IT systems of thousands of companies

On March 29, 2023, it became known about a large-scale cyber attack through the supply chain related to the 3SKh VoIP telephony system. The IT systems of thousands of companies around the world are at risk.

According to the 3SKh, unknown attackers managed to embed malicious code into the 3CX DesktopApp application with Electron technology for personal computers. Windows builds 18.12.407 and 18.12.416, as well as versions 18.11.1213, 18.12.402, 18.12.407 and 18.12.416 for macOS, are infected. According to the results of the preliminary investigation, the problem is related to one of the libraries that is compiled into the Windows Electron App via GIT.

Unknown attackers managed to embed malicious code into the 3CX DesktopApp

Kaspersky Lab notes that through a malicious program signed with a valid 3SKh certificate, cybercriminals attack customers of this company, the number of which exceeds 600 thousand. They include major corporations such as American Express, Coca-Cola, McDonald's, BMW, Honda, Air France, Toyota, Mercedes-Benz and IKEA. After penetrating the victim's computer, the trojanized program creates several malicious libraries, downloads.ICO files with additional data from the GitHub website, and downloads the final malicious load.

The downloaded malware is able to collect information about the system, as well as steal information and saved credentials from user profiles of browsers such as Chrome, Edge, Brave and Firefox. In addition, attackers can deploy an interactive command shell, which in theory allows you to do almost anything with the victim's computer, "the Kaspersky Lab publication says.

The company 3SKh emphasizes that the domains accessed by the hacked library are already known - most of them are disabled. The GitHub repository used in the attacks is also closed. 3SKh is working on a new application for Windows that does not have this problem. In addition, the company will release a new certificate for its^[1]

Notes