{"id":577,"date":"2023-03-30T13:34:44","date_gmt":"2023-03-30T16:34:44","guid":{"rendered":"https:\/\/techsecurity.com.br\/?p=577"},"modified":"2023-03-30T13:34:46","modified_gmt":"2023-03-30T16:34:46","slug":"hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos","status":"publish","type":"post","link":"https:\/\/techsecurity.com.br\/2023\/03\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\/","title":{"rendered":"Hackers comprometem o aplicativo de desktop 3CX em um ataque \u00e0 cadeia de suprimentos"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Uma vers\u00e3o digitalmente assinada e trojanizada do cliente de desktop <strong>3CX Voice Over Internet Protocol (VOIP)<\/strong> est\u00e1 sendo usada para atingir os clientes da empresa em um ataque cont\u00ednuo \u00e0 cadeia de suprimentos(supply chain attack). 3CX \u00e9 uma empresa de desenvolvimento de software VoIP IPBX cujo sistema telef\u00f4nico 3CX \u00e9 usado por mais de 600.000 empresas em todo o mundo e tem mais de 12 milh\u00f5es de usu\u00e1rios di\u00e1rios. A lista de clientes da empresa inclui uma longa lista de empresas e organiza\u00e7\u00f5es de alto n\u00edvel, como American Express, Coca-Cola, McDonald&#8217;s, BMW, Honda, AirFrance, NHS, Toyota, Mercedes-Benz, IKEA e HollidayInn.<\/p>\n\n\n\n<p class=\"has-large-font-size wp-block-paragraph\">Ataque a cadeia de suprimentos (supply chain attack)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Supply chain attack, ou ataque \u00e0 cadeia de suprimentos, \u00e9 um tipo de ataque cibern\u00e9tico que visa comprometer uma cadeia de fornecedores ou terceiros confi\u00e1veis \u200b\u200bque fornecem servi\u00e7os ou produtos a uma organiza\u00e7\u00e3o. O objetivo \u00e9 explorar a confian\u00e7a nas rela\u00e7\u00f5es entre fornecedor e consumidor para infiltrar malware ou outras amea\u00e7as na rede de uma organiza\u00e7\u00e3o sem ser detectado. Isso pode permitir que os atacantes obtenham acesso n\u00e3o autorizado a sistemas e dados cr\u00edticos e causem danos significativos.<\/p>\n\n\n\n<p class=\"has-large-font-size wp-block-paragraph\">Sobre o ataque<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">De acordo com alertas de pesquisadores de seguran\u00e7a da Sophos e CrowdStrike, os invasores t\u00eam como alvo usu\u00e1rios de Windows e macOS do aplicativo de softphone 3CX comprometido. <em>\u201cA atividade maliciosa inclui comunica\u00e7\u00e3o com central de controle por operador, implanta\u00e7\u00e3o de segundo est\u00e1gio de infec\u00e7\u00e3o, em um pequeno n\u00famero de casos, monitoramento de teclas (keylogger)\u201d<\/em>, disse a equipe de intelig\u00eancia de amea\u00e7as da CrowdStrike. <em>&#8220;A atividade p\u00f3s-explora\u00e7\u00e3o mais comum observada at\u00e9 o momento \u00e9 a gera\u00e7\u00e3o de um shell de comando interativo&#8221;<\/em>, acrescentou a Sophos em um comunicado emitido por meio de seu servi\u00e7o de Detec\u00e7\u00e3o e Resposta Gerenciada. Embora a CrowdStrike suspeite que um grupo de hackers apoiado pelo estado norte-coreano que rastreia como <strong>Labyrinth Collima<\/strong> est\u00e1 por tr\u00e1s desse ataque, os pesquisadores da Sophos dizem que <em>&#8220;n\u00e3o podem verificar essa atribui\u00e7\u00e3o com alta confian\u00e7a&#8221;<\/em>. Sabe-se que a atividade do Labyrinth Collima se sobrep\u00f5e a outros atores de amea\u00e7as rastreados como Lazarus Group. <\/p>\n\n\n\n<p class=\"has-large-font-size wp-block-paragraph\">Ataque \u00e0 cadeia de suprimentos do software <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Esse ataque \u00e0 cadeia de suprimentos, apelidado de &#8216;SmoothOperator&#8217; pelo SentinelOne, come\u00e7a quando o instalador MSI \u00e9 baixado do site da 3CX ou uma atualiza\u00e7\u00e3o \u00e9 enviada para um aplicativo de desktop j\u00e1 instalado. <\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"552\" src=\"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/image-6-1024x552.png\" alt=\"\" class=\"wp-image-579\" srcset=\"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/image-6-1024x552.png 1024w, https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/image-6-300x162.png 300w, https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/image-6-768x414.png 768w, https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/image-6.png 1294w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">Update instalando os arquivos maliciosos (fonte: <em>Sophos<\/em>)<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Quando o MSI ou atualiza\u00e7\u00e3o \u00e9 instalado, ele extrai os arquivos DLL maliciosos <strong>ffmpeg.dll [VirusTotal]<\/strong> e <strong>d3dcompiler_47.dll [VirusTotal]<\/strong>, que s\u00e3o usados para executar a pr\u00f3xima etapa do ataque. Embora a Sophos declare que o execut\u00e1vel 3CXDesktopApp.exe n\u00e3o \u00e9 malicioso, a DLL maliciosa ffmpeg.dll ser\u00e1 carregada e usada para extrair uma carga criptografada de d3dcompiler_47.dll e execut\u00e1-la. O SentinelOne explica que o malware agora far\u00e1 o download de arquivos de \u00edcone hospedados no GitHub que cont\u00eam strings codificadas em Base64 anexadas ao final das imagens, conforme mostrado abaixo.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"778\" height=\"629\" src=\"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/image-5.png\" alt=\"\" class=\"wp-image-578\" srcset=\"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/image-5.png 778w, https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/image-5-300x243.png 300w, https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/image-5-768x621.png 768w\" sizes=\"auto, (max-width: 778px) 100vw, 778px\" \/><figcaption class=\"wp-element-caption\">Base64 anexada ao final do \u00edcone (fonte: BleepingComputer)<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">O reposit\u00f3rio GitHub onde esses \u00edcones est\u00e3o armazenados mostra que o primeiro \u00edcone foi carregado em 7 de dezembro de 2022. O malware de primeiro est\u00e1gio usa essas strings Base64 para baixar uma carga final para os dispositivos comprometidos, um malware de roubo de informa\u00e7\u00f5es anteriormente desconhecido baixado como uma DLL. Esse novo malware \u00e9 capaz de coletar informa\u00e7\u00f5es do sistema e roubar dados e credenciais armazenadas dos perfis de usu\u00e1rio do Chrome, Edge, Brave e Firefox. <em>&#8220;Neste momento, n\u00e3o podemos confirmar que o instalador do Mac tenha trojanizado da mesma forma. Nossa investiga\u00e7\u00e3o em andamento inclui aplicativos adicionais, como a extens\u00e3o do Chrome, que tamb\u00e9m podem ser usados para preparar ataques&#8221;<\/em>, disse o SentinelOne. <em>\u201cO operador do malware registrou um amplo conjunto de infraestrutura a partir de fevereiro de 2022, mas ainda n\u00e3o vemos conex\u00f5es \u00f3bvias com os clusters de amea\u00e7as existentes\u201d<\/em>.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"501\" height=\"406\" src=\"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/image-7.png\" alt=\"\" class=\"wp-image-580\" srcset=\"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/image-7.png 501w, https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/image-7-300x243.png 300w\" sizes=\"auto, (max-width: 501px) 100vw, 501px\" \/><figcaption class=\"wp-element-caption\">Dados roubados pelo malware (fonte: <em>SentinelOne<\/em>)<\/figcaption><\/figure>\n\n\n\n<p class=\"has-large-font-size wp-block-paragraph\">Como se proteger<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Os cyber ataques de supply chain s\u00e3o uma amea\u00e7a crescente e preocupante para empresas e organiza\u00e7\u00f5es em todo o mundo. Eles podem ter impactos devastadores, n\u00e3o s\u00f3 na pr\u00f3pria organiza\u00e7\u00e3o, mas tamb\u00e9m em seus clientes e parceiros. Para se proteger contra esses tipos de ataques, \u00e9 importante adotar uma abordagem de seguran\u00e7a proativa e implementar medidas preventivas robustas. Algumas dicas s\u00e3o: <\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Fa\u00e7a uma avalia\u00e7\u00e3o detalhada da cadeia de suprimentos: Conhecer bem sua cadeia de suprimentos \u00e9 crucial para identificar vulnerabilidades e poss\u00edveis pontos de entrada para os cibercriminosos.<\/li>\n\n\n\n<li>Certifique-se de realizar uma an\u00e1lise de risco completa, identificando quaisquer riscos potenciais e implementando medidas de seguran\u00e7a adequadas para reduzir esses riscos. <\/li>\n\n\n\n<li>Implemente controles de seguran\u00e7a robustos: \u00c9 importante implementar controles de seguran\u00e7a em todas as partes da cadeia de suprimentos, desde a sele\u00e7\u00e3o de fornecedores confi\u00e1veis at\u00e9 a verifica\u00e7\u00e3o regular de seus sistemas e aplicativos de seguran\u00e7a. <\/li>\n\n\n\n<li>Certifique-se de que todos os fornecedores que lidam com dados confidenciais sigam as melhores pr\u00e1ticas de seguran\u00e7a de TI. <\/li>\n\n\n\n<li>Mantenha-se atualizado com as \u00faltimas amea\u00e7as: O cibercrime est\u00e1 em constante evolu\u00e7\u00e3o, com novas amea\u00e7as emergindo a todo momento. <\/li>\n\n\n\n<li>Fique atento a not\u00edcias e informa\u00e7\u00f5es sobre amea\u00e7as atuais, e esteja preparado para implementar medidas de seguran\u00e7a adicionais conforme necess\u00e1rio.<\/li>\n<\/ul>\n\n\n\n<p class=\"has-large-font-size wp-block-paragraph\">IOC&#8217;s<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td>URL<\/td><td>github[.]com\/IconStorages\/images<\/td><\/tr><tr><td>Email<\/td><td>cliego.garcia@proton[.]me<\/td><\/tr><tr><td>Email<\/td><td>philip.je@proton[.]me<\/td><\/tr><tr><td>SHA-1<\/td><td>cad1120d91b812acafef7175f949dd1b09c6c21a<\/td><\/tr><tr><td>SHA-1<\/td><td>bf939c9c261d27ee7bb92325cc588624fca75429<\/td><\/tr><tr><td>SHA-1<\/td><td>20d554a80d759c50d6537dd7097fed84dd258b3e<\/td><\/tr><tr><td>URI<\/td><td>https:\/\/www.3cx[.]com\/blog\/event-trainings\/<\/td><\/tr><tr><td>URI<\/td><td>https:\/\/akamaitechcloudservices[.]com\/v2\/storage<\/td><\/tr><tr><td>URI<\/td><td>https:\/\/azureonlinestorage[.]com\/azure\/storage<\/td><\/tr><tr><td>URI<\/td><td>https:\/\/msedgepackageinfo[.]com\/microsoft-edge<\/td><\/tr><tr><td>URI<\/td><td>https:\/\/glcloudservice[.]com\/v1\/console<\/td><\/tr><tr><td>URI<\/td><td>https:\/\/pbxsources[.]com\/exchange<\/td><\/tr><tr><td>URI<\/td><td>https:\/\/msstorageazure[.]com\/window<\/td><\/tr><tr><td>URI<\/td><td>https:\/\/officestoragebox[.]com\/api\/session<\/td><\/tr><tr><td>URI<\/td><td>https:\/\/visualstudiofactory[.]com\/workload<\/td><\/tr><tr><td>URI<\/td><td>https:\/\/azuredeploystore[.]com\/cloud\/services<\/td><\/tr><tr><td>URI<\/td><td>https:\/\/msstorageboxes[.]com\/office<\/td><\/tr><tr><td>URI<\/td><td>https:\/\/officeaddons[.]com\/technologies<\/td><\/tr><tr><td>URI<\/td><td>https:\/\/sourceslabs[.]com\/downloads<\/td><\/tr><tr><td>URI<\/td><td>https:\/\/zacharryblogs[.]com\/feed<\/td><\/tr><tr><td>URI<\/td><td>https:\/\/pbxcloudeservices[.]com\/phonesystem<\/td><\/tr><tr><td>URI<\/td><td>https:\/\/pbxphonenetwork[.]com\/voip<\/td><\/tr><tr><td>URI<\/td><td>https:\/\/msedgeupdate[.]net\/Windows<\/td><\/tr><\/tbody><\/table><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>Hackers comprometem o aplicativo de desktop 3CX em um ataque \u00e0 cadeia de suprimentos<\/p>\n","protected":false},"author":2,"featured_media":581,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[19],"tags":[36],"class_list":["post-577","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-informativo","tag-malware"],"yoast_head":"<title>Hackers comprometem o aplicativo de desktop 3CX em um ataque \u00e0 cadeia de suprimentos - Tech Security<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/techsecurity.com.br\/2023\/03\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\/\" \/>\n<meta property=\"og:locale\" content=\"pt_BR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Hackers comprometem o aplicativo de desktop 3CX em um ataque \u00e0 cadeia de suprimentos - Tech Security\" \/>\n<meta property=\"og:description\" content=\"Hackers comprometem o aplicativo de desktop 3CX em um ataque \u00e0 cadeia de suprimentos\" \/>\n<meta property=\"og:url\" content=\"https:\/\/techsecurity.com.br\/2023\/03\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\/\" \/>\n<meta property=\"og:site_name\" content=\"Tech Security\" \/>\n<meta property=\"article:published_time\" content=\"2023-03-30T16:34:44+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-03-30T16:34:46+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-30-3cx.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"647\" \/>\n\t<meta property=\"og:image:height\" content=\"315\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"redator\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"redator\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. tempo de leitura\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\\\/\"},\"author\":{\"name\":\"redator\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/person\\\/cbf56a9c02423f4f6f5bbfad3e3f95f6\"},\"headline\":\"Hackers comprometem o aplicativo de desktop 3CX em um ataque \u00e0 cadeia de suprimentos\",\"datePublished\":\"2023-03-30T16:34:44+00:00\",\"dateModified\":\"2023-03-30T16:34:46+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\\\/\"},\"wordCount\":1073,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/03\\\/2023-03-30-3cx.jpg\",\"keywords\":[\"malware\"],\"articleSection\":[\"Informativo\"],\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\\\/\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\\\/\",\"name\":\"Hackers comprometem o aplicativo de desktop 3CX em um ataque \u00e0 cadeia de suprimentos - Tech Security\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/03\\\/2023-03-30-3cx.jpg\",\"datePublished\":\"2023-03-30T16:34:44+00:00\",\"dateModified\":\"2023-03-30T16:34:46+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\\\/#breadcrumb\"},\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\\\/#primaryimage\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/03\\\/2023-03-30-3cx.jpg\",\"contentUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/03\\\/2023-03-30-3cx.jpg\",\"width\":647,\"height\":315},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/03\\\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"In\u00edcio\",\"item\":\"https:\\\/\\\/techsecurity.com.br\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Hackers comprometem o aplicativo de desktop 3CX em um ataque \u00e0 cadeia de suprimentos\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#website\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/\",\"name\":\"Tech Security\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/techsecurity.com.br\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-BR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#organization\",\"name\":\"Tech Security\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/01\\\/Captura-de-tela-2023-01-26-092032-e1674773223849.png\",\"contentUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/01\\\/Captura-de-tela-2023-01-26-092032-e1674773223849.png\",\"width\":100,\"height\":89,\"caption\":\"Tech Security\"},\"image\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/person\\\/cbf56a9c02423f4f6f5bbfad3e3f95f6\",\"name\":\"redator\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g\",\"caption\":\"redator\"},\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/author\\\/redator\\\/\"}]}<\/script>","yoast_head_json":{"title":"Hackers comprometem o aplicativo de desktop 3CX em um ataque \u00e0 cadeia de suprimentos - Tech Security","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/techsecurity.com.br\/2023\/03\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\/","og_locale":"pt_BR","og_type":"article","og_title":"Hackers comprometem o aplicativo de desktop 3CX em um ataque \u00e0 cadeia de suprimentos - Tech Security","og_description":"Hackers comprometem o aplicativo de desktop 3CX em um ataque \u00e0 cadeia de suprimentos","og_url":"https:\/\/techsecurity.com.br\/2023\/03\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\/","og_site_name":"Tech Security","article_published_time":"2023-03-30T16:34:44+00:00","article_modified_time":"2023-03-30T16:34:46+00:00","og_image":[{"width":647,"height":315,"url":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-30-3cx.jpg","type":"image\/jpeg"}],"author":"redator","twitter_card":"summary_large_image","twitter_misc":{"Escrito por":"redator","Est. tempo de leitura":"6 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/techsecurity.com.br\/2023\/03\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\/#article","isPartOf":{"@id":"https:\/\/techsecurity.com.br\/2023\/03\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\/"},"author":{"name":"redator","@id":"https:\/\/techsecurity.com.br\/#\/schema\/person\/cbf56a9c02423f4f6f5bbfad3e3f95f6"},"headline":"Hackers comprometem o aplicativo de desktop 3CX em um ataque \u00e0 cadeia de suprimentos","datePublished":"2023-03-30T16:34:44+00:00","dateModified":"2023-03-30T16:34:46+00:00","mainEntityOfPage":{"@id":"https:\/\/techsecurity.com.br\/2023\/03\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\/"},"wordCount":1073,"commentCount":0,"publisher":{"@id":"https:\/\/techsecurity.com.br\/#organization"},"image":{"@id":"https:\/\/techsecurity.com.br\/2023\/03\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\/#primaryimage"},"thumbnailUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-30-3cx.jpg","keywords":["malware"],"articleSection":["Informativo"],"inLanguage":"pt-BR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/techsecurity.com.br\/2023\/03\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/techsecurity.com.br\/2023\/03\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\/","url":"https:\/\/techsecurity.com.br\/2023\/03\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\/","name":"Hackers comprometem o aplicativo de desktop 3CX em um ataque \u00e0 cadeia de suprimentos - Tech Security","isPartOf":{"@id":"https:\/\/techsecurity.com.br\/#website"},"primaryImageOfPage":{"@id":"https:\/\/techsecurity.com.br\/2023\/03\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\/#primaryimage"},"image":{"@id":"https:\/\/techsecurity.com.br\/2023\/03\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\/#primaryimage"},"thumbnailUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-30-3cx.jpg","datePublished":"2023-03-30T16:34:44+00:00","dateModified":"2023-03-30T16:34:46+00:00","breadcrumb":{"@id":"https:\/\/techsecurity.com.br\/2023\/03\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\/#breadcrumb"},"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/techsecurity.com.br\/2023\/03\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\/"]}]},{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/techsecurity.com.br\/2023\/03\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\/#primaryimage","url":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-30-3cx.jpg","contentUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/03\/2023-03-30-3cx.jpg","width":647,"height":315},{"@type":"BreadcrumbList","@id":"https:\/\/techsecurity.com.br\/2023\/03\/hackers-comprometem-o-aplicativo-de-desktop-3cx-em-um-ataque-a-cadeia-de-suprimentos\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"In\u00edcio","item":"https:\/\/techsecurity.com.br\/"},{"@type":"ListItem","position":2,"name":"Hackers comprometem o aplicativo de desktop 3CX em um ataque \u00e0 cadeia de suprimentos"}]},{"@type":"WebSite","@id":"https:\/\/techsecurity.com.br\/#website","url":"https:\/\/techsecurity.com.br\/","name":"Tech Security","description":"","publisher":{"@id":"https:\/\/techsecurity.com.br\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/techsecurity.com.br\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-BR"},{"@type":"Organization","@id":"https:\/\/techsecurity.com.br\/#organization","name":"Tech Security","url":"https:\/\/techsecurity.com.br\/","logo":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/techsecurity.com.br\/#\/schema\/logo\/image\/","url":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/01\/Captura-de-tela-2023-01-26-092032-e1674773223849.png","contentUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/01\/Captura-de-tela-2023-01-26-092032-e1674773223849.png","width":100,"height":89,"caption":"Tech Security"},"image":{"@id":"https:\/\/techsecurity.com.br\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/techsecurity.com.br\/#\/schema\/person\/cbf56a9c02423f4f6f5bbfad3e3f95f6","name":"redator","image":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/secure.gravatar.com\/avatar\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g","caption":"redator"},"url":"https:\/\/techsecurity.com.br\/author\/redator\/"}]}},"wps_subtitle":"","_links":{"self":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts\/577","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/comments?post=577"}],"version-history":[{"count":1,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts\/577\/revisions"}],"predecessor-version":[{"id":582,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts\/577\/revisions\/582"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/media\/581"}],"wp:attachment":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/media?parent=577"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/categories?post=577"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/tags?post=577"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}