criticaltestEmerging Threat
Malicious DLL Load By Compromised 3CXDesktopApp
Detects DLL load activity of known compromised DLLs used in by the compromised 3CXDesktopApp
windowsimage_load
2024-11-23
Emerging Threats
Actor2023
3CX Supply Chain
8Rules
6References
1Folders
2024-11-23Latest
Summary
3CX Supply Chain is tracked here as a threat actor, intrusion set, or campaign with 8 Sigma detections spanning 2023. Coverage centers on windows / process_creation, proxy, windows / dns_query +2.
Related Detections
Search this threathightestEmerging Threat
Potential Compromised 3CXDesktopApp Execution
Detects execution of known compromised version of 3CXDesktopApp
windowsprocess_creation
2024-11-23
hightestEmerging Threat
Potential Compromised 3CXDesktopApp Beaconing Activity - Proxy
Detects potential beaconing activity to domains related to 3CX 3CXDesktopApp compromise
Generalproxy
2023-05-18
hightestEmerging Threat
Potential Compromised 3CXDesktopApp Beaconing Activity - DNS
Detects potential beaconing activity to domains related to 3CX 3CXDesktopApp compromise
windowsdns_query
2023-03-31
hightestEmerging Threat
Potential Compromised 3CXDesktopApp Beaconing Activity - Netcon
Detects potential beaconing activity to domains related to 3CX 3CXDesktopApp compromise
windowsnetwork_connection
2023-03-31
References