According to experts from various cybersecurity firms, a threat actor is currently actively using a compromised desktop communications app from 3CX to target 3CX clients. The compromised app was infected by malicious code in a software supply chain attack. According to analysts from various security organizations, hackers working for the North Korean government launched a significant supply chain attack against 3CX customers running Windows and macOS. 3CX is a popular desktop client for audio and video chatting.