SmoothOperator Supply Chain Attack Targeting 3CX VOIP Desktop Client
Tags
| maec-delivery-vectors: | Watering Hole |
| attack-pattern: | Direct Code Signing - T1553.002 Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Malware - T1587.001 Malware - T1588.001 Software - T1592.002 Code Signing - T1116 |
Common Information
| Type | Value |
|---|---|
| UUID | ee8a3ed6-a950-446d-9716-b7df1e4abd78 |
| Fingerprint | 4b31bd5b4d4aa7d9 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | March 30, 2023, 10:33 a.m. |
| Added to db | March 30, 2023, 12:59 p.m. |
| Last updated | Nov. 17, 2024, 9:55 a.m. |
| Headline | SmoothOperator Supply Chain Attack Targeting 3CX VOIP Desktop Client |
| Title | SmoothOperator Supply Chain Attack Targeting 3CX VOIP Desktop Client |
| Detected Hints/Tags/Attributes | 36/2/24 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 238 | ✔ | SOCRadar® Cyber Intelligence Inc. | https://socradar.io/feed/ | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 33 | akamaicontainer.com |
|
| Details | Domain | 40 | akamaitechcloudservices.com |
|
| Details | Domain | 40 | azuredeploystore.com |
|
| Details | Domain | 32 | azureonlinecloud.com |
|
| Details | Domain | 40 | azureonlinestorage.com |
|
| Details | Domain | 29 | dunamistrd.com |
|
| Details | Domain | 41 | glcloudservice.com |
|
| Details | Domain | 29 | qwepoi123098.com |
|
| Details | Domain | 37 | sbmsa.wiki |
|
| Details | Domain | 39 | sourceslabs.com |
|
| Details | Domain | 40 | visualstudiofactory.com |
|
| Details | Domain | 40 | msedgepackageinfo.com |
|
| Details | Domain | 39 | msstorageazure.com |
|
| Details | Domain | 42 | msstorageboxes.com |
|
| Details | Domain | 41 | officeaddons.com |
|
| Details | Domain | 41 | officestoragebox.com |
|
| Details | Domain | 41 | pbxcloudeservices.com |
|
| Details | Domain | 41 | pbxphonenetwork.com |
|
| Details | Domain | 41 | zacharryblogs.com |
|
| Details | Domain | 42 | pbxsources.com |
|
| Details | Domain | 41 | journalide.org |
|
| Details | File | 62 | ffmpeg.dll |
|
| Details | File | 50 | d3dcompiler_47.dll |
|
| Details | File | 3 | agent.cfm |