RomCom APT Strikes Again: Exploits in Mozilla and Windows Unveiled!
The Russia-aligned RomCom group is on a cyber rampage, exploiting Mozilla and Windows vulnerabilities. Like a zero-click ninja, they silently install backdoors on unsuspecting computers. Thanks to quick patching, ESET stopped their romantic comedy of errors before it turned into a full-blown cybersecurity horror film.

Hot Take:
When it comes to advanced persistent threats, RomCom isn’t just a comedy genre! With a name like Tropical Scorpius, you might think this APT group is hosting a beach party, but in reality, they’re throwing a digital nightmare. Mozilla and Windows zero-day vulnerabilities exploited? That’s no laughing matter, but at least now we know why our digital lives got ghosted!
Key Points:
- Russia-aligned RomCom APT group exploited Mozilla and Windows zero-day vulnerabilities.
- Vulnerabilities were discovered and patched by ESET in October 2024.
- RomCom group used zero-click exploits to install backdoors on victims’ computers.
- Victims were primarily located in Europe and North America.
- The vulnerabilities could be chained for more sophisticated and stealthy attacks.
Already a member? Log in here