| Aspect | Einzelheiten |
|---|---|
| Threat Actors | RomCom, suspected ties to Russia, also known as Tropical Scorpius, Storm-0978, or UNC2596. |
| Campaign Overview | Exploited zero-day vulnerabilities (CVE-2024-9680 & CVE-2024-49039) to deploy RomCom backdoor via zero-click exploits. |
| Target Regions (Or Victims) | Primarily Europe and North America, with up to 250 affected targets between October 10 – November 4, 2024. |
| Methodology | Fake domains, zero-click exploits, privilege escalation, and stealthy redirection via malicious websites. |
| Product Targeted | Mozilla Firefox, Thunderbird, Tor browsers, and Microsoft Windows Task Scheduler. |
| Malware Reference | RomCom backdoor |
| Tools Used | Fake domains (e.g., redircorrectiv[.]com), Reflective DLL Injection, C2 servers like journalctd[.]live. |
| Vulnerabilities Exploited | CVE-2024-9680 (Use-After-Free in Firefox), CVE-2024-49039 (Elevation of Privilege in Windows Task Scheduler). |
| TTPs | Phishing domains, zero-click exploit chain, DLL injection, and system compromise via backdoor. |
| Attribution | RomCom threat group, suspected Russian ties. |
| Recommendations | Monitor for IOCs, use SOCRadar’s Vulnerability Intelligence to track CVEs, and implement Brand Protection for domain detection. |
| Quelle | SOCRadar |
RomCom-Backdoor-Angriffe nutzen Zero-Day-Exploits in Mozilla und Windows (CVE-2024-9680 & CVE-2024-49039)
Teilen:
London, GB
7:35 pm,
Mai 17, 2025
18°C
L: 17° |
H: 19°
Fühlt sich an wie 17°C°
klarer Himmel
Tägliche VorhersageStündliche Vorhersage
Today
10:00 pm
17° | 19°°C
0 mm
0%
7 mph
58 %
1021 mb
0 mm/h
Tomorrow
10:00 pm
9° | 16°°C
0 mm
0%
9 mph
83 %
1022 mb
0 mm/h
Mo. Mai 19
10:00 pm
11° | 19°°C
0.2 mm
20%
13 mph
78 %
1022 mb
0 mm/h
Di. Mai 20
10:00 pm
9° | 21°°C
0.35 mm
35%
9 mph
81 %
1022 mb
0 mm/h
Mi. Mai 21
10:00 pm
11° | 20°°C
0.09 mm
9%
11 mph
79 %
1020 mb
0 mm/h
Today
10:00 pm
15° | 17°°C
0 mm
0%
7 mph
58 %
1021 mb
0 mm/h
Tomorrow
1:00 am
12° | 14°°C
0 mm
0%
5 mph
69 %
1021 mb
0 mm/h
Tomorrow
4:00 am
11° | 11°°C
0 mm
0%
6 mph
83 %
1021 mb
0 mm/h
Tomorrow
7:00 am
9° | 9°°C
0 mm
0%
8 mph
82 %
1021 mb
0 mm/h
Tomorrow
10:00 am
11° | 11°°C
0 mm
0%
6 mph
69 %
1022 mb
0 mm/h
Tomorrow
1:00 pm
15° | 15°°C
0 mm
0%
7 mph
52 %
1021 mb
0 mm/h
Tomorrow
4:00 pm
16° | 16°°C
0 mm
0%
9 mph
49 %
1020 mb
0 mm/h
Tomorrow
7:00 pm
14° | 14°°C
0 mm
0%
8 mph
56 %
1019 mb
0 mm/h
| Name | Preis | 24H (%) |
|---|---|---|
 Bitcoin(BTC) | €92,501.64 | -0.72% |
 Ethereum(ETH) | €2,221.30 | -4.00% |
 Fesseln(USDT) | €0.90 | -0.01% |
 XRP(XRP) | €2.10 | -2.66% |
 Solana(SOL) | €149.20 | -2.46% |
 USDC(USDC) | €0.90 | 0.00% |
 Dogecoin(DOGE) | €0.193088 | -4.75% |
 Shiba Inu(SHIB) | €0.000013 | -4.71% |
 Pepe(PEPE) | €0.000011 | -7.97% |
 Peanut das Eichhörnchen(PNUT) | €0.269763 | -10.66% |
