The cybersecurity firm said the actor behind the attack, which they track as UNC4736, has a "nexus" to North Korea, thought they stopped short of attributing it to state actors.
Article Link: Mandiant bolsters the case that North Korean hackers were behind 3CX supply chain hack | SC Media