UPDATE ON 4th April
3CX have posted the following update:
The Windows Electron App 18.12.425 has come back with the all clear from Mandiant.
The main difference with 18.12.422 is that it has been signed with a new certificate.
We hope to push this version to customers tomorrow.
We still recommend using the PWA Web App.
We are currently building a new version Update 7a – should be in QA by next week – which has:
BLF panel for PWA dialer.
Improved install screen in web client.
We only have a handful of cases reported to us where malware has actually been triggered. And these reports still require verification. Furthermore after removal of the infected files using anti virus software no further malicious outbound traffic has been observed. Of course this may change but this is the status as of today.
We are taking the opportunity to strengthen our policies, practices, and technology to protect against future attacks.
We will be posting more news as it comes available.