A supply chain attack which targeted 3CX en route to its customers also compromised two energy firms and two financial traders, according to Symantec. The security vendor explained the news in a blog post the day after Mandiant revealed that the original 3CX supply chain attack was enabled by a previous compromise of futures trading software.

Read full article on Infosecurity