36gate denotes the March 2023 supply-chain compromise of the 3CX Desktop App for Windows and macOS. Attackers tampered with legitimate, vendor-signed builds distributed to 3CX customers, causing the application to load malicious bundled libraries. The code delayed execution before attempting to retrieve and run an additional payload, exposing organizations that used the affected VoIP client to downstream compromise through a trusted software-update channel.