The 3CX supply chain attack (2023) compromised software used by 600,000 organizations globally, including major enterprises like American Express and Mercedes-Benz. Attackers infiltrated 3CX’s update mechanism, distributing a trojanized version of its desktop app that installed malware on end-user systems. The attack leveraged polymorphic malware, making detection difficult via traditional signature-based tools. The breach enabled data exfiltration, lateral movement within corporate networks, and potential follow-on attacks, including credential theft and ransomware deployment. While not explicitly AI-generated, the attack exhibited AI-like characteristics—unique payloads per victim, evasion of sandboxing, and delayed activation—highlighting vulnerabilities in software supply chains. The incident resulted in operational disruptions, reputational damage, and financial losses across affected organizations, with some victims reporting fraudulent transactions and compromised internal systems. The prolonged detection timeline (aligned with IBM’s 2025 report average of 276 days) exacerbated the impact, as attackers maintained persistence in breached environments.