← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Caution When Using 3CX DesktopApp (CVE-2023-29059) - ASEC BLOG
WHITE jeffchandy 2023-04-11 Modified: 2023-04-11
104
IOCs
HIGH VOLUME
A security flaw in the 3CX DesktopApp has been identified and the company is preparing to issue a new certificate to protect users from the threat. £2.5m of malware.
asdahnlabwindowsc servermarchinfostealerdesktopapped fac addressescrowdstrikenorth koreadefenseinsidedownloaderc5403102c5403110c5403954osx.agentoverviewupdateelectron macossolution guidewindows keytype
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
ASD OSX.Agent C5403954 C5403110 C5403102
Indicators of Compromise (29 / 104 total)
All CVE FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain URL
TYPEINDICATORDESCRIPTIONCREATED
URL https://msedgepackageinfo.com/microsoft-edge — 2023-04-11
URL https://officeaddons.com/technologies — 2023-04-11
URL http://akamaitechcloudservices.com/v2/fileapi — 2023-04-11
URL http://azuredeploystore.com/cloud/images — 2023-04-11
URL http://azureonlinestorage.com/google/storage — 2023-04-11
URL http://glcloudservice.com/v1/status — 2023-04-11
URL http://msedgepackageinfo.com/ms-webview — 2023-04-11
URL http://msstorageazure.com/analysis — 2023-04-11
URL http://msstorageboxes.com/xbox — 2023-04-11
URL http://officeaddons.com/quality — 2023-04-11
URL http://officestoragebox.com/api/biosync — 2023-04-11
URL http://pbxcloudeservices.com/network — 2023-04-11
URL http://pbxphonenetwork.com/phone — 2023-04-11
URL http://pbxsources.com/queue — 2023-04-11
URL http://sourceslabs.com/status — 2023-04-11
URL http://visualstudiofactory.com/groupcore — 2023-04-11
URL http://zacharryblogs.com/xmlquery — 2023-04-11
URL https://akamaitechcloudservices.com/v2/storage — 2023-04-11
URL https://azuredeploystore.com/cloud/services — 2023-04-11
URL https://azureonlinestorage.com/azure/storage — 2023-04-11
URL https://glcloudservice.com/v1/console — 2023-04-11
URL https://msstorageazure.com/window — 2023-04-11
URL https://msstorageboxes.com/office — 2023-04-11
URL https://officestoragebox.com/api/session — 2023-04-11
URL https://pbxcloudeservices.com/phonesystem — 2023-04-11
URL https://pbxsources.com/exchange — 2023-04-11
URL https://sourceslabs.com/downloads — 2023-04-11
URL https://visualstudiofactory.com/workload — 2023-04-11
URL https://zacharryblogs.com/feed — 2023-04-11
References (2)
↗ https://asec.ahnlab.com/en/50919/ ↗ https://asec.ahnlab.com/en/51090/