3CX supply chain attack: What do we know?