ESET Research details the analysis of a previously unknown vulnerability in Mozilla products exploited in the wild and another previously unknown Microsoft Windows vulnerability, combined in a zero-click exploit.

Russian hacking group RomCom are taking advantage of vulnerabilities found in Windows and Mozilla products to silently install malware.

Russian-based RomCom cybercrime group chained two zero-day vulnerabilities in recent attacks targeting Firefox and Tor Browser users across Europe and North America.

RomCom exploits Firefox and Windows zero-day flaws to deliver malware via fake websites in Europe and North America.

The no-click exploit launched in October infected computers in Europe and North America with the RomCom backdoor when victims were redirected through attacker-controlled websites.

Russian hacking group RomCom exploited zero-day vulnerabilities in Mozilla Firefox and Microsoft Windows to launch widespread cyberattacks targeting users in Europe and North America, with both vulnerabilities now patched.

The Russia-aligned RomCom gang exploited the vulnerabilities to target hundreds of Firefox users across Europe and North America.