A security researcher has discovered a piece of malware planted on a Mac during an attack on the Firefox bug. The malware bears a striking resemblance to a similar malware variant from 2012. The vulnerability is a type confusion bug that occurs when Firefox handles some JavaScript objects. Mozilla patched the flaw on June 18 in Firefox 67.0.3, but by then it was already being used in targeted attacks. One of those attacks hit some employees of a cryptocurrency exchange and the security team there was able to detect the attacks and figure out what was going on.”]
Source: https://duo.com/decipher/firefox-0-day-used-to-deliver-netwire-mac-malware