> ## Content Index
> Fetch the complete content index at: https://ishangirdhar.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Cyber, (Mis)adventures #1 April 2023 Edition
- URL: https://ishangirdhar.com/cyber-mis-adventures-april-2023-edition/
- Published: 2023-04-30T14:00:00.000Z
- Updated: 2026-10-17T14:24:35.000Z
- Author: Ishan Girdhar

## Project 2: 🤯 Cyber, (Mis)adventures.

Read more about this project [here](https://www.ishangirdhar.com/cyber-misadventures/?ref=ishangirdhar.com).

If there is one thing you need to remember about April 2023, then it's

### 3CX Double Supply Chain Compromise

It's important because this double supply chain is the *first ever to be seen.*

> The double supply chain compromise led to malware being pushed out to some 3CX customers.

- The telephony company 3CX was recently compromised by North Korean state-sponsored hackers after a 3CX employee downloaded infected software from the website of Trading Technologies, a trading software company.
- Trading Technologies was previously compromised by the same group, which embedded malware in one of its programs before posting it to its website, where it remained for nearly a year.
- The daisy-chain nature of the breach makes it possible for attackers to conduct threaded supply-chain hacks that lead to a compromise of another software maker and their customers. Although Trading Technologies had discontinued the product in April 2020, the X\_Trader software remained available for download when the 3CX employee downloaded and installed it on his personal computer, leading to the breach.  
    
Read this [great article](https://zetter.substack.com/p/software-maker-3cx-was-compromised) written by [Zero Day Newsletter](https://zetter.substack.com/) by [Kim Zetter](https://twitter.com/KimZetter?ref=ishangirdhar.com)