The Russia-aligned threat actor known as RomCom has been linked to the zero-day exploitation of two security flaws, one in Mozilla Firefox and the other in Microsoft Windows, as part of attacks designed to deliver the eponymous backdoor on victim systems.
“In a successful attack, if a victim browses a web page containing the exploit, an adversary can run arbitrary code – without any user
Source:: The Hackers News