3CX: Difference between revisions
Initial entry for 3CX and references |
Removed unneccesary info about company founder, and rectified article notices |
||
(2 intermediate revisions by 2 users not shown) | |||
Line 1: | Line 1: | ||
{{SloppyAI}} | |||
{{StubNotice}} | |||
3CX, Inc., is a software development company and developer of the 3CX Phone System. | 3CX, Inc., is a software development company and developer of the 3CX Phone System. | ||
The 3CX Phone System is a software private branch exchange based on the SIP (Session Initiation Protocol) standard to allow calls via the public switched telephone network (PSTN) or via Voice over Internet Protocol (VoIP) services. | The 3CX Phone System is a software private branch exchange based on the SIP (Session Initiation Protocol) standard to allow calls via the public switched telephone network (PSTN) or via Voice over Internet Protocol (VoIP) services. | ||
In 2023, during a major supply chain attack affecting the 3CX desktop application, company's public response included engaging cybersecurity firm Mandiant and advising customers to uninstall affected versions. His communication during the breach received mixed reactions from the broader IT and managed service provider (MSP) communities.<sup>[[3CX#user-content-fn-1|1]][[3CX#user-content-fn-2|2]]</sup> | |||
' | |||
=== | ==Controversies== | ||
====Customer and Partner Relations==== | |||
The company's CTO, Nick Galea, has been the subject of criticism from some 3CX users and partners for alleged heavy-handed moderation practices and perceived unprofessional conduct in public forums. Multiple users on Reddit have reported being banned from the official 3CX community forums for raising technical concerns or criticizing company policies.<sup>[[3CX#user-content-fn-3|3]][[3CX#user-content-fn-4|4]]</sup> | |||
==== Customer and Partner Relations ==== | |||
Nick Galea has been the subject of criticism from some 3CX users and partners for alleged heavy-handed moderation practices and perceived unprofessional conduct in public forums. Multiple users on Reddit have reported being banned from the official 3CX community forums for raising technical concerns or criticizing company policies.<sup>[[3CX#user-content-fn-3|3]][[3CX#user-content-fn-4|4]]</sup> | |||
A recurring theme in these reports includes: | A recurring theme in these reports includes: | ||
* '''Forum bans for dissenting feedback''': Users claimed Galea personally blocked access to forums or terminated partnerships following criticism.<sup>[[3CX#user-content-fn-4|4]]</sup> | *'''Forum bans for dissenting feedback''': Users claimed Galea personally blocked access to forums or terminated partnerships following criticism.<sup>[[3CX#user-content-fn-4|4]]</sup> | ||
* '''Removal of public complaints''': Several threads were deleted from Reddit and the 3CX community forums after users described negative experiences with Galea or 3CX leadership.<sup>[[3CX#user-content-fn-3|3]][[3CX#user-content-fn-5|5]]</sup> | *'''Removal of public complaints''': Several threads were deleted from Reddit and the 3CX community forums after users described negative experiences with Galea or 3CX leadership.<sup>[[3CX#user-content-fn-3|3]][[3CX#user-content-fn-5|5]]</sup> | ||
* '''Alleged partner retaliation''': Some partners allege that their access to client accounts was revoked without prior warning.<sup>[[3CX#user-content-fn-6|6]]</sup> | *'''Alleged partner retaliation''': Some partners allege that their access to client accounts was revoked without prior warning.<sup>[[3CX#user-content-fn-6|6]]</sup> | ||
==== Supply Chain Incident Response ==== | ====Supply Chain Incident Response==== | ||
In March 2023, 3CX was the victim of a high-profile supply chain attack, with desktop clients distributed via trojanized updates. During the incident, | In March 2023, 3CX was the victim of a high-profile supply chain attack, with desktop clients distributed via trojanized updates. During the incident, 3CX's CTO issued statements that were later scrutinized for tone. A now-deleted Reddit comment attributed to the CTO dismissed concerns by saying the issue was “not an exploit, it’s a feature,” which some MSPs interpreted as flippant.<sup>[[3CX#user-content-fn-7|7]]</sup> | ||
In addition, 3CX faced backlash for requiring users to pay to open support tickets during the breach, which led to further public criticism from system administrators and IT professionals.<sup>[[3CX#user-content-fn-1|1]]</sup> | In addition, 3CX faced backlash for requiring users to pay to open support tickets during the breach, which led to further public criticism from system administrators and IT professionals.<sup>[[3CX#user-content-fn-1|1]]</sup> | ||
== References: == | ==References:== | ||
# “3CX Compromise Confirmed by Nick,” ''r/msp'', Reddit [https://www.reddit.com/r/msp/comments/126ckmg/3cx_compromise_confirmed_by_nick/ thread] | #“20230329 Situational Awareness - Crowdstrike,” ''r/crowdstrike'', Reddit [https://www.reddit.com/r/crowdstrike/comments/125r3uu/20230329_situational_awareness_crowdstrike/ thread] | ||
#“3CX desktop app compromised, abused in supply chain attack,” ''TechTarget'', [https://www.reddit.com/r/crowdstrike/comments/125r3uu/20230329_situational_awareness_crowdstrike/ techtarget.com] | |||
#“My 3CX Partnership Deleted and All Linked Clients Lost,” ''r/3CX'', Reddit [https://www.reddit.com/r/3CX/comments/xev0u5/my_3cx_partnership_deleted_and_all_linked_clients/ thread] | |||
#“Stay Away from 3CX,” ''r/3CX'', Reddit [https://www.reddit.com/r/3CX/comments/1amkm5f/stay_away_from_3cx/ thread] | |||
#“Banned from the 3CX Community,” ''r/3CX'', Reddit [https://www.reddit.com/r/3CX/comments/xn0ztp/banned_from_the_3cx_community/ thread] | |||
#“Anyone else ever been fired by 3CX as a customer?” ''r/3CX'', Reddit [https://www.reddit.com/r/3CX/comments/w7tyg7/anyone_else_ever_been_fired_by_3cx_as_a_customer/ thread] | |||
#“3CX Compromise Confirmed by Nick,” ''r/msp'', Reddit [https://www.reddit.com/r/msp/comments/126ckmg/3cx_compromise_confirmed_by_nick/ thread] |