{"version":"1.0","provider_name":"\u0645\u062f\u0648\u0646\u0629 Cyber DZ","provider_url":"https:\/\/cyberdz.dz\/blogs","author_name":"cyber","author_url":"https:\/\/cyberdz.dz\/blogs\/author\/cyber\/","title":"[M\u00e0J] Compromission de l\u2019application 3CX Desktop App - \u0645\u062f\u0648\u0646\u0629 Cyber DZ","type":"rich","width":600,"height":338,"html":"<blockquote class=\"wp-embedded-content\" data-secret=\"a5A3MGqe84\"><a href=\"https:\/\/cyberdz.dz\/blogs\/maj-compromission-de-lapplication-3cx-desktop-app\/\">[M\u00e0J] Compromission de l\u2019application 3CX Desktop App<\/a><\/blockquote><iframe sandbox=\"allow-scripts\" security=\"restricted\" src=\"https:\/\/cyberdz.dz\/blogs\/maj-compromission-de-lapplication-3cx-desktop-app\/embed\/#?secret=a5A3MGqe84\" width=\"600\" height=\"338\" title=\"&#8220;[M\u00e0J] Compromission de l\u2019application 3CX Desktop App&#8221; &#8212; \u0645\u062f\u0648\u0646\u0629 Cyber DZ\" data-secret=\"a5A3MGqe84\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\" class=\"wp-embedded-content\"><\/iframe><script>\n\/*! This file is auto-generated *\/\n!function(d,l){\"use strict\";l.querySelector&&d.addEventListener&&\"undefined\"!=typeof URL&&(d.wp=d.wp||{},d.wp.receiveEmbedMessage||(d.wp.receiveEmbedMessage=function(e){var t=e.data;if((t||t.secret||t.message||t.value)&&!\/[^a-zA-Z0-9]\/.test(t.secret)){for(var s,r,n,a=l.querySelectorAll('iframe[data-secret=\"'+t.secret+'\"]'),o=l.querySelectorAll('blockquote[data-secret=\"'+t.secret+'\"]'),c=new RegExp(\"^https?:$\",\"i\"),i=0;i<o.length;i++)o[i].style.display=\"none\";for(i=0;i<a.length;i++)s=a[i],e.source===s.contentWindow&&(s.removeAttribute(\"style\"),\"height\"===t.message?(1e3<(r=parseInt(t.value,10))?r=1e3:~~r<200&&(r=200),s.height=r):\"link\"===t.message&&(r=new URL(s.getAttribute(\"src\")),n=new URL(t.value),c.test(n.protocol))&&n.host===r.host&&l.activeElement===s&&(d.top.location.href=t.value))}},d.addEventListener(\"message\",d.wp.receiveEmbedMessage,!1),l.addEventListener(\"DOMContentLoaded\",function(){for(var e,t,s=l.querySelectorAll(\"iframe.wp-embedded-content\"),r=0;r<s.length;r++)(t=(e=s[r]).getAttribute(\"data-secret\"))||(t=Math.random().toString(36).substring(2,12),e.src+=\"#?secret=\"+t,e.setAttribute(\"data-secret\",t)),e.contentWindow.postMessage({message:\"ready\",secret:t},\"*\")},!1)))}(window,document);\n\/\/# sourceURL=https:\/\/cyberdz.dz\/blogs\/wp-includes\/js\/wp-embed.min.js\n<\/script>\n","description":"\u00a0[M\u00e0J] Compromission de l\u2019application 3CX Desktop App &nbsp; \u0645\u062d\u062a\u0648\u064a\u0627\u062a \u0627\u0644\u062a\u0646\u0628\u064a\u0647: &#8211; \u062c\u062f\u0648\u0644 \u0645\u0639\u0644\u0648\u0645\u0627\u062a &#8211; \u0627\u0644\u0645\u062e\u0627\u0637\u0631 &#8211; \u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0645\u062b\u0623\u062b\u0631\u0629 &#8211; \u0645\u0644\u062e\u0635 \u062d\u0648\u0644 \u0627\u0644\u062b\u063a\u0631\u0629 &#8211; \u0627\u0644\u062d\u0644\u0648\u0644 &#8211; \u0627\u0644\u0645\u0635\u0627\u062f\u0631 \u0645\u0639\u0644\u0648\u0645\u0627\u062a : \u0627\u0644\u0645\u0631\u062c\u0639 CERTFR-2023-ALE-003 \u0627\u0644\u0639\u0646\u0648\u0627\u0646 [M\u00e0J] Compromission de l\u2019application 3CX Desktop App \u062a\u0627\u0631\u064a\u062e \u0627\u0644\u0627\u0635\u062f\u0627\u0631 \u0627\u0644\u0623\u0648\u0644 31 mars 2023 \u062a\u0627\u0631\u064a\u062e \u0623\u062e\u0631 \u062a\u062d\u062f\u064a\u062b 12 avril 2023 \u0627\u0644\u0645\u0635\u0627\u062f\u0631 Alerte de s\u00e9curit\u00e9 de l&#8217;\u00e9diteur 3CX du 30 mars 2023 \u0627\u0644\u0645\u0631\u0641\u0642\u0627\u062a Aucune(s) \u0627\u0644\u0645\u062e\u0627\u0637\u0631: D\u00e9ploiement d&#8217;une charge utile malveillante sur le syst\u00e8me \u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0645\u062b\u0623\u062b\u0631\u0629: Application de bureau 3CX (application Electron pour macOS) versions 18.11.1213, 18.12.402, 18.12.407 et 18.12.416 Application de bureau 3CX (application Electron pour Windows) versions 18.12.407 et 18.12.416 \u0645\u0644\u062e\u0635 \u0627\u0644\u062b\u063a\u0631\u0629: Le 30 mars 2023, l&#8217;\u00e9diteur a publi\u00e9 un communiqu\u00e9 concernant la compromission de leur application de bureau 3CX (3CX Desktop App). Cette application de conf\u00e9rence vocale et vid\u00e9o, dans certaines versions, est infect\u00e9e par un cheval de Troie qui rend possible le d\u00e9ploiement d&#8217;une charge utile \u00e0 des fins malveillantes. \u0627\u0644\u062d\u0644\u0648\u0644 \u0645\u0646 \u0647\u062f\u0647 \u0627\u0644\u062b\u063a\u0631\u0629: Le CERT-FR ne peut pas confirmer, \u00e0 ce stade, si d&#8217;autres versions que celles mentionn\u00e9es dans la section Syst\u00e8mes affect\u00e9s sont compromises. Il est donc tr\u00e8s fortement recommand\u00e9, quelle que soit la version, de d\u00e9sinstaller l&#8217;application de bureau 3CX et de suivre la recommandation de l&#8217;\u00e9diteur consistant \u00e0 utiliser l&#8217;application web PWA. L&#8217;\u00e9diteur propose un manuel d&#8217;utilisation qui peut simplifier cette transition [1]. \u0627\u0644\u0645\u0635\u0627\u062f\u0631: Alerte de s\u00e9curit\u00e9 de l&#8217;\u00e9diteur 3CX du 30 mars 2023 https:\/\/www.3cx.com\/blog\/news\/desktopapp-security-alert\/ [1] Manuel d&#8217;utilisation 3CX Web Client (PWA) https:\/\/www.3cx.com\/user-manual\/web-client\/ [2] Rapport CrowdStrike du 29 mars 2023 https:\/\/www.crowdstrike.com\/blog\/crowdstrike-detects-and-prevents-active-intrusion-campaign-targeting-3cxdesktopapp-customers\/ [3] Rapport SentinelOne https:\/\/www.sentinelone.com\/blog\/smoothoperator-ongoing-campaign-trojanizes-3cx-software-in-software-supply-chain-attack\/ Avis ENISA EU https:\/\/github.com\/enisaeu\/CNW\/blob\/main\/advisories\/CVE-2023-XXXXX_3CX-DesktopApp.md [4] Les bons r\u00e9flexes en cas d\u2019intrusion sur un syst\u00e8me d\u2019information https:\/\/www.cert.ssi.gouv.fr\/les-bons-reflexes-en-cas-dintrusion-sur-un-systeme-dinformation\/ [5] Publication li\u00e9e \u00e0 la sortie de la version 18.12.425 de l&#8217;application de bureau 3CX https:\/\/www.3cx.com\/blog\/releases\/v18u7-desktop-app-electron\/ &nbsp;","thumbnail_url":"https:\/\/i0.wp.com\/cyberdz.dz\/blogs\/wp-content\/uploads\/sites\/2\/2023\/07\/security-Logo-Design.png?fit=200%2C200&ssl=1","thumbnail_width":200,"thumbnail_height":200}