Russian hacking group RomCom exploited zero-day vulnerabilities in Mozilla Firefox and Microsoft Windows to launch widespread cyberattacks targeting users in Europe and North America, with both vulnerabilities now patched.

Russia-backed hackers, known as RomCom, have exploited critical zero-day vulnerabilities in Mozilla Firefox and Windows to launch targeted attacks

ESET Research details the analysis of a previously unknown vulnerability in Mozilla products exploited in the wild and another previously unknown Microsoft Windows vulnerability, combined in a zero-click exploit.

The no-click exploit launched in October infected computers in Europe and North America with the RomCom backdoor when victims were redirected through attacker-controlled websites.