The 3CX Desktop App, an enterprise software providing communications like chat, video calls, and voice calls, was recently involved in a software supply chain compromise. In March 2023, malware spread through a trojanized version of 3CX's legitimate software (3CX DesktopApp 18.12.416 and earlier), allowing threat actors to steal browser information. Mandiant identified the activity as UNC4736, a suspected North Korean nexus cluster of activity. This incident sheds light on the importance of robust cybersecurity measures.