Russian RomCom APT Group Leverages Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-49039 | Windows Task Scheduler Elevation-of-Privilege Flaw Actively Exploited in the Wild | 8.8 | 14% | KEVRansomware | KEV |
| CVE-2024-9680 | Use-After-Free in Mozilla Firefox Animation Timelines Allows Code Execution | 9.8 | 23% | KEVRansomware | KEV |
From the original article
2 min read at infosecurity-magazine.com
Russia-aligned RomCom Advanced persistent threat (APT) group has been observed exploiting Mozilla and Windows zero day and zero click vulnerabilities. A researcher at cybersecurity firm ESET discovered the two vulnerabilities in October 2024, they have both since been patched. The vulnerability discovered in Mozilla’s Firefox, now assigned CVE-2024-9680 with a CVSS score of 9.
By Beth Maundrill · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.