Group-IB identified Lazarus as one of the prominent APT groups that launched new tactics in 2023, citing the group’s first-ever double supply chain attack. The Lazarus activity exploited a vulnerability in Trading Technologies’ X_TRADER software to gain access to the network behind the widely used 3CX Desktop App for VoIP calls. That compromise exposed a broad set of 3CX clients through a trusted software supply chain rather than direct targeting alone. The broader report also notes that APT groups increasingly abused legitimate services such as Dropbox, OneDrive, Google Drive, and Telegram, while government and military entities were the most targeted APT victim category in 2023.