A forensic analysis conducted by the cybersecurity firm Mandiant on the recent supply chain attack against VoIP IPBX software development company 3CX has revealed that a North Korean hacker group, UNC4736, had infected 3CX systems with multiple malware strains, along with Gopuram and AppleJeus malware.