While this is absolutely not related to FreePBX, there are a lot of FreePBX admins who also administer 3CX systems
3CX CEO’s response:
The best way to go about this is to uninstall the app… We strongly recommend using our PWA client instead.
Also, when a user asked:
I have seen reports that the PBX instances themselves have also been compromised, is there any truth to this? or is it just the client app for windows?
I did not see a response to that…