| Aspect | Einzelheiten |
|---|---|
| Threat Actors | RomCom, suspected ties to Russia, also known as Tropical Scorpius, Storm-0978, or UNC2596. |
| Campaign Overview | Exploited zero-day vulnerabilities (CVE-2024-9680 & CVE-2024-49039) to deploy RomCom backdoor via zero-click exploits. |
| Target Regions (Or Victims) | Primarily Europe and North America, with up to 250 affected targets between October 10 – November 4, 2024. |
| Methodology | Fake domains, zero-click exploits, privilege escalation, and stealthy redirection via malicious websites. |
| Product Targeted | Mozilla Firefox, Thunderbird, Tor browsers, and Microsoft Windows Task Scheduler. |
| Malware Reference | RomCom backdoor |
| Tools Used | Fake domains (e.g., redircorrectiv[.]com), Reflective DLL Injection, C2 servers like journalctd[.]live. |
| Vulnerabilities Exploited | CVE-2024-9680 (Use-After-Free in Firefox), CVE-2024-49039 (Elevation of Privilege in Windows Task Scheduler). |
| TTPs | Phishing domains, zero-click exploit chain, DLL injection, and system compromise via backdoor. |
| Attribution | RomCom threat group, suspected Russian ties. |
| Recommendations | Monitor for IOCs, use SOCRadar’s Vulnerability Intelligence to track CVEs, and implement Brand Protection for domain detection. |
| Quelle | SOCRadar |
RomCom Backdoor Attacks Use Zero-Day Exploits in Mozilla and Windows (CVE-2024-9680 & CVE-2024-49039
Teilen:
London, GB
9:58 am,
Jan. 18, 2025
2°C
L: 1° |
H: 3°
Fühlt sich an wie -0°C°
overcast clouds
Tägliche VorhersageStündliche Vorhersage
Today
9:00 pm
1° | 3°°C
0 mm
0%
4 mph
90 %
1031 mb
0 mm/h
Tomorrow
9:00 pm
1° | 5°°C
0 mm
0%
7 mph
93 %
1024 mb
0 mm/h
Mo. Jan. 20
9:00 pm
3° | 8°°C
0.26 mm
26%
6 mph
97 %
1019 mb
0 mm/h
Di. Jan. 21
9:00 pm
4° | 8°°C
0 mm
0%
8 mph
95 %
1019 mb
0 mm/h
Mi. Jan. 22
9:00 pm
4° | 7°°C
1 mm
100%
4 mph
99 %
1012 mb
0 mm/h
Today
12:00 pm
3° | 5°°C
0 mm
0%
3 mph
83 %
1031 mb
0 mm/h
Today
3:00 pm
4° | 6°°C
0 mm
0%
3 mph
75 %
1028 mb
0 mm/h
Today
6:00 pm
3° | 3°°C
0 mm
0%
4 mph
88 %
1026 mb
0 mm/h
Today
9:00 pm
2° | 2°°C
0 mm
0%
3 mph
90 %
1025 mb
0 mm/h
Tomorrow
12:00 am
2° | 2°°C
0 mm
0%
3 mph
89 %
1024 mb
0 mm/h
Tomorrow
3:00 am
1° | 1°°C
0 mm
0%
3 mph
91 %
1022 mb
0 mm/h
Tomorrow
6:00 am
1° | 1°°C
0 mm
0%
3 mph
93 %
1021 mb
0 mm/h
Tomorrow
9:00 am
3° | 3°°C
0 mm
0%
4 mph
83 %
1021 mb
0 mm/h
| Name | Preis | 24H (%) |
|---|---|---|
 Bitcoin(BTC) | €100,409.18 | 1.17% |
 Ethereum(ETH) | €3,177.85 | -4.26% |
 XRP(XRP) | €3.03 | -5.11% |
 Fesseln(USDT) | €0.97 | -0.03% |
 Solana(SOL) | €231.03 | 10.04% |
 Dogecoin(DOGE) | €0.387298 | -3.53% |
 USDC(USDC) | €0.97 | -0.01% |
 Shiba Inu(SHIB) | €0.000022 | -6.22% |
 Pepe(PEPE) | €0.000019 | -4.91% |
 Peanut das Eichhörnchen(PNUT) | €0.52 | -15.84% |
