The so-called X-Trader software supply chain attack, first identified by Mandiant, spread malware by causing companies to download infected versions of 3CX software.
The two unidentified infrastructure organizations are in the United States and Europe in the power and energy business, according to Symantec.