RomCom Backdoor Attacks Use Zero-Day Exploits in Mozilla and Windows (CVE-2024-9680 & CVE-2024-49039

Teilen:
Aspect Einzelheiten
Threat Actors RomCom, suspected ties to Russia, also known as Tropical Scorpius, Storm-0978, or UNC2596.
Campaign Overview Exploited zero-day vulnerabilities (CVE-2024-9680 & CVE-2024-49039) to deploy RomCom backdoor via zero-click exploits.
Target Regions (Or Victims) Primarily Europe and North America, with up to 250 affected targets between October 10 – November 4, 2024.
Methodology Fake domains, zero-click exploits, privilege escalation, and stealthy redirection via malicious websites.
Product Targeted Mozilla Firefox, Thunderbird, Tor browsers, and Microsoft Windows Task Scheduler.
Malware Reference RomCom backdoor
Tools Used Fake domains (e.g., redircorrectiv[.]com), Reflective DLL Injection, C2 servers like journalctd[.]live.
Vulnerabilities Exploited CVE-2024-9680 (Use-After-Free in Firefox), CVE-2024-49039 (Elevation of Privilege in Windows Task Scheduler).
TTPs Phishing domains, zero-click exploit chain, DLL injection, and system compromise via backdoor.
Attribution RomCom threat group, suspected Russian ties.
Recommendations Monitor for IOCs, use SOCRadar’s Vulnerability Intelligence to track CVEs, and implement Brand Protection for domain detection.
Quelle SOCRadar

Quelle

Kommentar verfassen

Deine E-Mail-Adresse wird nicht veröffentlicht. Erforderliche Felder sind mit * markiert

lade-bild
London, GB
10:47 am, Juli 13, 2025
Wetter-Symbol 23°C
L: 20° | H: 24°
klarer Himmel
Luftfeuchtigkeit: 58 %
Druck: 1013 mb
Wind: 4 mph NE
Windböe: 4 mph
UV-Index: 0
Niederschlag: 0 mm
Wolken: 3%
Regen Chance: 0%
Sichtbarkeit: 10 km
Sonnenaufgang: 4:58 am
Sonnenuntergang: 9:13 pm
TäglichStündlich
Tägliche VorhersageStündliche Vorhersage
Today 10:00 pm
Wetter-Symbol
20° | 24°°C 0 mm 0% 6 mph 54 % 1013 mb 0 mm/h
Tomorrow 10:00 pm
Wetter-Symbol
19° | 27°°C 0 mm 0% 15 mph 71 % 1015 mb 0 mm/h
Di. Juli 15 10:00 pm
Wetter-Symbol
15° | 22°°C 1 mm 100% 17 mph 85 % 1016 mb 0 mm/h
Mi. Juli 16 10:00 pm
Wetter-Symbol
14° | 27°°C 0.11 mm 11% 11 mph 85 % 1017 mb 0 mm/h
Do. Juli 17 10:00 pm
Wetter-Symbol
18° | 27°°C 1 mm 100% 13 mph 95 % 1015 mb 0 mm/h
Today 1:00 pm
Wetter-Symbol
24° | 27°°C 0 mm 0% 3 mph 54 % 1013 mb 0 mm/h
Today 4:00 pm
Wetter-Symbol
28° | 30°°C 0 mm 0% 0 mph 38 % 1011 mb 0 mm/h
Today 7:00 pm
Wetter-Symbol
27° | 27°°C 0 mm 0% 6 mph 31 % 1008 mb 0 mm/h
Today 10:00 pm
Wetter-Symbol
23° | 23°°C 0 mm 0% 6 mph 40 % 1010 mb 0 mm/h
Tomorrow 1:00 am
Wetter-Symbol
19° | 19°°C 0 mm 0% 5 mph 40 % 1011 mb 0 mm/h
Tomorrow 4:00 am
Wetter-Symbol
20° | 20°°C 0 mm 0% 5 mph 52 % 1010 mb 0 mm/h
Tomorrow 7:00 am
Wetter-Symbol
19° | 19°°C 0 mm 0% 9 mph 71 % 1011 mb 0 mm/h
Tomorrow 10:00 am
Wetter-Symbol
23° | 23°°C 0 mm 0% 12 mph 54 % 1012 mb 0 mm/h
Name Preis24H (%)
Bitcoin(BTC)
€100,789.02
-0.23%
Ethereum(ETH)
€2,522.88
-0.89%
XRP(XRP)
€2.38
-1.30%
Fesseln(USDT)
€0.86
0.00%
Solana(SOL)
€138.56
-0.44%
USDC(USDC)
€0.86
0.00%
Dogecoin(DOGE)
€0.168715
-2.40%
Shiba Inu(SHIB)
€0.000011
-2.45%
Pepe(PEPE)
€0.000010
-2.43%
Peanut das Eichhörnchen(PNUT)
€0.246209
7.19%
Nach oben scrollen