| Aspect | Details |
|---|---|
| Threat Actors | RomCom, suspected ties to Russia, also known as Tropical Scorpius, Storm-0978, or UNC2596. |
| Campaign Overview | Exploited zero-day vulnerabilities (CVE-2024-9680 & CVE-2024-49039) to deploy RomCom backdoor via zero-click exploits. |
| Target Regions (Or Victims) | Primarily Europe and North America, with up to 250 affected targets between October 10 – November 4, 2024. |
| Methodology | Fake domains, zero-click exploits, privilege escalation, and stealthy redirection via malicious websites. |
| Product Targeted | Mozilla Firefox, Thunderbird, Tor browsers, and Microsoft Windows Task Scheduler. |
| Malware Reference | RomCom backdoor |
| Tools Used | Fake domains (e.g., redircorrectiv[.]com), Reflective DLL Injection, C2 servers like journalctd[.]live. |
| Vulnerabilities Exploited | CVE-2024-9680 (Use-After-Free in Firefox), CVE-2024-49039 (Elevation of Privilege in Windows Task Scheduler). |
| TTPs | Phishing domains, zero-click exploit chain, DLL injection, and system compromise via backdoor. |
| Attribution | RomCom threat group, suspected Russian ties. |
| Recommendations | Monitor for IOCs, use SOCRadar’s Vulnerability Intelligence to track CVEs, and implement Brand Protection for domain detection. |
| Source | SOCRadar |
RomCom Backdoor Attacks Use Zero-Day Exploits in Mozilla and Windows (CVE-2024-9680 & CVE-2024-49039
Share:
London, GB
11:10 pm,
Jun 30, 2025
25°C
L: 23° |
H: 26°
Feels like 25°C°
clear sky
Daily ForecastHourly Forecast
Tomorrow
10:00 pm
23° | 26°°C
0 mm
0%
11 mph
65 %
1015 mb
0 mm/h
Wed Jul 02
10:00 pm
19° | 26°°C
0 mm
0%
12 mph
75 %
1024 mb
0 mm/h
Thu Jul 03
10:00 pm
14° | 26°°C
0 mm
0%
7 mph
53 %
1029 mb
0 mm/h
Fri Jul 04
10:00 pm
16° | 28°°C
0 mm
0%
10 mph
47 %
1028 mb
0 mm/h
Sat Jul 05
10:00 pm
16° | 21°°C
1 mm
100%
12 mph
90 %
1019 mb
0 mm/h
Tomorrow
1:00 am
23° | 24°°C
0 mm
0%
3 mph
62 %
1014 mb
0 mm/h
Tomorrow
4:00 am
21° | 22°°C
0 mm
0%
3 mph
65 %
1014 mb
0 mm/h
Tomorrow
7:00 am
22° | 22°°C
0 mm
0%
5 mph
61 %
1014 mb
0 mm/h
Tomorrow
10:00 am
28° | 28°°C
0 mm
0%
3 mph
44 %
1014 mb
0 mm/h
Tomorrow
1:00 pm
30° | 30°°C
0 mm
0%
6 mph
32 %
1014 mb
0 mm/h
Tomorrow
4:00 pm
34° | 34°°C
0 mm
0%
8 mph
26 %
1013 mb
0 mm/h
Tomorrow
7:00 pm
32° | 32°°C
0 mm
0%
11 mph
31 %
1013 mb
0 mm/h
Tomorrow
10:00 pm
25° | 25°°C
0 mm
0%
8 mph
46 %
1015 mb
0 mm/h
| Name | Price | 24H (%) |
|---|---|---|
 Bitcoin(BTC) | €91,726.36 | 0.08% |
 Ethereum(ETH) | €2,141.69 | 2.99% |
 Tether(USDT) | €0.85 | 0.00% |
 XRP(XRP) | €1.95 | 4.59% |
 Solana(SOL) | €134.28 | 4.10% |
 USDC(USDC) | €0.85 | 0.00% |
 Dogecoin(DOGE) | €0.142338 | 1.58% |
 Shiba Inu(SHIB) | €0.000010 | 0.00% |
 Pepe(PEPE) | €0.000009 | 2.69% |
