3CX Desktop App Compromise

You may have read some information recently about a 3CX compromise which affected its 3CX Desktop Application. This affects Windows versions 18.12.407 and 18.12.416 and MAC versions 18.11.1213, 18.12.402, 18.12.407 and 18.12.416. The issues started to appear from around the 29th of March 2023, and as of 31 March 2023, 3CX have released an update 18.12.422 which they have release to mitigate the issue. In a few more days, there will be a newer version released which will be rebuilt from the ground up with a new signed certificate.

Most AV product should detect the malicious software (including Windows Defender, Webroot and Sophos) and it will remove it for you.

A very small number of out clients actually use the 3CX Desktop Application. To check your version, find the 3CX Icon in your system tray as shown below

right click on it and select the about menu item

It should be version 18.12.422 which is the latest update. If it is showing any of the versions we mentioned above, we highly recommend removing the 3CX DesktopApp immediately.

If you are unsure about any of this, please just give us a call to check rather than risk anything happening.

The latest 3CX blog can be read here. There will be more information on this soon once a new version has been released and once 3CX has completed its full investigation.