Kevin Beaumont on Nostr: I’ve noticed a bunch of victims of one ransomware group all have something in ...
I’ve noticed a bunch of victims of one ransomware group all have something in common - they all run #3CX, with it internet accessible.
3CX PBX is very common in SMB space, but there’s so many coming through lately that it is raising my eyebrows. One to watch. #threatintel
Published at
2023-11-15 22:21:57Event JSON
{
"id": "ec805cb603ad961aa24b962c119a4e15ebb824047d38e5f5e065891c53dbc7a2",
"pubkey": "f6870afcde4480ec8508f50304859e14a51309ff24ab3f0f862c52bdc4af8747",
"created_at": 1700086917,
"kind": 1,
"tags": [
[
"t",
"3cx"
],
[
"t",
"threatintel"
],
[
"proxy",
"https://cyberplace.social/users/GossiTheDog/statuses/111416896247300573",
"activitypub"
]
],
"content": "I’ve noticed a bunch of victims of one ransomware group all have something in common - they all run #3CX, with it internet accessible. \n\n3CX PBX is very common in SMB space, but there’s so many coming through lately that it is raising my eyebrows. One to watch. #threatintel",
"sig": "cd9ce80a638cd12aba1d10a37fe122b665610468d30a20749be013e84f99ddc19ba3d336010c25413f23ca35db9999227c2cb000fa473dc597ba8a7ff5922529"
}
