The no-click exploit launched in October infected computers in Europe and North America with the RomCom backdoor when victims were redirected through attacker-controlled websites.

Russia-backed hackers, known as RomCom, have exploited critical zero-day vulnerabilities in Mozilla Firefox and Windows to launch targeted attacks

The Russian hacking group also chained the attack with a previously unknown vulnerability in Windows 10 and 11 to install a backdoor on the victim computers.

Russian hackers seen exploiting two zero-days to deploy backdoors against victims in Europe and North America.