hxxps://www.reddit[.]com/r/crowdstrike/comments/125r3uu/20230329_situational_awareness_crowdstrike/URL
Reported by 2 independent sources · first reported by Huntress · last reported
Last reported 3 years ago
What the reports say
2 reports, newest first · the exact sentence from each-
Elastic users protected from SUDDENICON’s supply chain attack“The following were referenced throughout the above research: - hxxps://www.reddit[.]com/r/crowdstrike/comments/125r3uu/20230329_situational_awareness_crowdstrike/ - hxxps://www.sentinelone.com/blog/smoothoperator-ongoing-campaign-trojanizes-3cx-software-in-software-supply-chain-att…”
-
3CX VoIP Software Compromise & Supply Chain Threats“hxxps://www.reddit[.]com/r/crowdstrike/comments/125r3uu/20230329_situational_awareness_crowdstrike/”
Indicators reported together
named in the same reports- hxxps://www.todyl[.]com/blog/post/threat-advisory-3cx-softphone-telephony-campaignin 2 reports
- www.todyl[.]comin 2 reports
- hxxps://raw.githubusercontent[.]com/IconStorages/images/main/icon%d.icoin 1 report
- hxxps://github[.]com/IconStorages/imagesin 1 report
- hxxps://www.3cx[.]com/blog/event-trainings/https://akamaitechcloudservices.com/v2/storagehttps://akamaitechcloudservices.com/v2/storagehttps://azureonlinestorage.com/azure/storagehttps://msedgepackageinfo.com/microsoft-edgehttps://glcloudservice.com/v1/consolehttps://pbxsources.com/exchangehttps://msstorageazure.com/windowhttps://officestoragebox.com/api/sessionhttps://visualstudiofactory.com/workloadhttps://azuredeploystore.com/cloud/serviceshttps://msstorageboxes.com/officehttps://officeaddons.com/technologieshttps://sourceslabs.com/downloadshttps://zacharryblogs.com/feedhttps://pbxcloudeservices.com/phonesystemhttps://pbxphonenetwork.com/voiphttps://msedgeupdate.net/Windowsin 1 report
- www.3cx[.]comin 1 report
- hxxps://www.3cx[.]com/blog/event-trainings/in 1 report
- hxxps://msedgeupdate[.]net/Windowsin 1 report
- msedgeupdate[.]netin 1 report
- a60a61bf844bc181…01e19cc36203in 1 report
- 5d99efa36f34aa6b…df2624550734in 1 report
- 54004dfaa48ca5fa…6aad89132a02in 1 report
- d45674f941be3cca…e212ed4c74aein 1 report
- hxxps://www.3cx[.]com/blog/news/desktopapp-security-alert-updates/in 1 report
- hxxps://s1[.]ai/smoothoperatorin 1 report
- s1[.]aiin 1 report
- hxxps://www.3cx[.]com/community/threads/threat-alerts-from-sentinelone-for-desktop-update-initiated-from-desktop-client.119806/post-558710in 1 report
- hxxps://www.3cx[.]com/community/threads/3cx-desktop-app-vulnerability-security-group-contact.119930/in 1 report
- hxxps://www.3cx[.]com/community/threads/crowdstrike-endpoint-security-detection-re-3cx-desktop-app.119934/#post-558726in 1 report
- hxxps://www.3cx[.]com/community/threads/3cx-desktopapp-security-alert.119951/#post-558907in 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.