RomCom Exploits Zero-Day Firefox and Windows Flaws in …
Nov 26, 2024 · The Russia-aligned threat actor known as RomCom has been linked to the zero-day exploitation of two security flaws, one in Mozilla Firefox and the other in Microsoft Windows, as part of attacks designed to deliver the eponymous backdoor on victim systems.
Firefox and Windows zero-days exploited by Russian RomCom …
Nov 26, 2024 · Russian-based RomCom cybercrime group chained two zero-day vulnerabilities in recent attacks targeting Firefox and Tor Browser users across Europe and North America.
RomCom Exploits Zero-Day Firefox and Windows Flaws in …
Nov 27, 2024 · Initial Intrusion: Exploiting the CVE-2024-9680 vulnerability in Firefox and CVE-2024-49039 in Windows allows RomCom to gain full control over an infected system. Zero-click attack : The exploit chain requires no user interaction, allowing attackers to compromise systems covertly and quickly.
Russia-linked hackers exploited Firefox and Windows bugs in …
Nov 26, 2024 · Security researchers have uncovered two previously unknown zero-day vulnerabilities that are being actively exploited by RomCom, a Russian-linked hacking group, to target Firefox browser users...
Russian RomCom APT Group Leverages Zero-Day Flaws in Firefox…
6 days ago · The vulnerability discovered in Mozilla’s Firefox, now assigned CVE-2024-9680 with a CVSS score of 9.8, has been exploited in the wild by Russia-aligned APT group RomCom. RomCom is also known as Storm-0978, Tropical Scorpius, or UNC2596.
RomCom hackers chained Firefox and Windows zero-days to …
Nov 26, 2024 · Russia-aligned APT group RomCom was behind attacks that leveraged CVE-2024-9680, a remote code execution flaw in Firefox, and CVE-2024-49039, an elevation of privilege vulnerability in...
RomCom exploits Firefox and Windows zero days in the wild
Nov 26, 2024 · RomCom Firefox sandbox escape. A9D445B77F6F4E90C29E 385264D4B1B95947ADD5: PocLowIL.dll: Win64/Runner.AD: ... Award-winning news, views, and insight from the ESET security community
Russian hackers exploit Firefox, Windows zero-days in wild
Nov 26, 2024 · A "Russia-aligned group" known as RomCom exploited Firefox and Windows Task Scheduler zero-day vulnerabilities in the wild, according to research from antimalware vendor ESET.
Windows Zero-days & Firefox Vulnerability Exploited by RomCom …
Nov 26, 2024 · Russian-aligned hacking group RomCom has been discovered exploiting two critical zero-day vulnerabilities affecting Mozilla Firefox and Windows systems in a sophisticated cyber-espionage campaign. The vulnerabilities allowed attackers to execute malicious code on victims’ computers without any user interaction.
Russian APT RomCom combines Firefox and Windows zero-day …
6 days ago · When visiting the redirect page, a malicious JavaScript script is executed that exploits a use-after-free memory vulnerability in the Firefox animation timelines feature. The flaw, now tracked as...
- Some results have been removed