3CX Supply Chain Attack by Lazarus also Targets Crypto Firms

Kaspersky attributed the 3CX supply chain attack to the North Korean Lazarus APT group, owing to the deployment of the Gopuram and AppleJeus backdoors used by the threat actor. Attackers deployed Gopuram on machines mostly belonging to cryptocurrency companies in Brazil, Germany, Italy, and France.