Weekly: 3CX supply chain attack, Rostec deanonymize Telegram, IcedID

In this early released episode of ShadowTalk, host Chris Morgan, along with ReliaQuest CISO Rick Holland, Kim Bromley, and Colin Ferris discuss the latest news in cyber security and threat research. Topics this week include:

• Implications from the 3CX supply-chain attack and what you need to do going forward
• Russian telco Rostec de-anonymizing Telegram users
• Updates to the IcedID malware

Resources:

• https://www.3cx.com/community/threads/3cx-desktopapp-security-alert.119951/
• https://www.reliaquest.com/blog/3cx-trojan-attack/
• https://www.bleepingcomputer.com/news/security/russia-s-rostec-allegedly-can-de-anonymize-telegram-users/
• https://www.bleepingcomputer.com/news/security/new-icedid-variants-shift-from-bank-fraud-to-malware-delivery/