Automatic Updates Deliver Malicious 3CX ‘Upgrades’ to Enterprises

In a Solar Winds-like attack, compromised, digitally signed versions of 3CX DesktopApp are landing on user systems via the vendor’s official, legitimate update mechanism, security firms warn.