North Korea was very likely behind the massive breach of virtual phone service company 3CX, the company has confirmed.

In a report released Tuesday, the company’s chief information security officer Pierre Jourdan stated that cybersecurity firm Mandiant, which had been tasked with investigating the intrusion, assessed with “high confidence” that the so-called supply chain attack was linked to the DPRK. 

The attackers infected the company’s systems with a piece of malware named TAXHAUL, which installs a component referred to as COLDCAT used to download additional malware on systems running Microsoft Windows, according to