Serval versions of 3CX’s desktop app have been affected by an attack on its product and larger supply chain.