Russian hacker group RomCom has exploited two zero-day vulnerabilities in Windows and Firefox to create a backdoor.
The vulnerabilities allowed unauthorized access to compromised systems, enabling hackers to monitor, steal data, and control the affected devices.
The first vulnerability (CVE-2024-9680) affected Firefox's animation function and was fixed within 24 hours after being reported to Mozilla.
The second vulnerability (CVE-2024-49039) affected Microsoft Windows, allowing the hackers to bypass security features and gain complete control over the system.