Russian hackers seen exploiting two zero-days to deploy backdoors against victims in Europe and North America.

The no-click exploit launched in October infected computers in Europe and North America with the RomCom backdoor when victims were redirected through attacker-controlled websites.

ESET Research details the analysis of a previously unknown vulnerability in Mozilla products exploited in the wild and another previously unknown Microsoft Windows vulnerability, combined in a zero-click exploit.

The Russia-aligned RomCom gang exploited the vulnerabilities to target hundreds of Firefox users across Europe and North America.

Russian-based RomCom cybercrime group chained two zero-day vulnerabilities in recent attacks targeting Firefox and Tor Browser users across Europe and North America.

Russian hacking group RomCom exploited zero-day vulnerabilities in Mozilla Firefox and Microsoft Windows to launch widespread cyberattacks targeting users in Europe and North America, with both vulnerabilities now patched.

Russia-backed hackers, known as RomCom, have exploited critical zero-day vulnerabilities in Mozilla Firefox and Windows to launch targeted attacks

The Russian hacking group also chained the attack with a previously unknown vulnerability in Windows 10 and 11 to install a backdoor on the victim computers.