RomCom Mounts Zero-Day, Zero-Click Browser Escapes in Firefox, Tor

The Russian-linked APT RomCom exploited two zero-day vulnerabilities in Firefox, Tor, and Windows for zero-click attacks in October. Victims unknowingly downloaded a backdoor from spoofed websites, targeting North America and Europe.