In early February, CISA warned of attacks on FreePBX instances. Currently, hundreds of compromised installations are online.