04/13/2023
Ransomware being spread
“ ZDI's Childs said the flaw, designated CVE-2013-3900 , has been getting exploited as part of the software supply chain attack on 3CX, which is a voice and video calling desktop client used by major multinational companies. Multiple security firms have attributed those attacks to North Korea's Lazarus group of APT hackers."
Bank Info Security Post on “Microsoft Patches Zero-Day Bug Exploited by Ransomware Group"