Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware

Cybersecurity researchers at Forescout Research - Vedere Labs disclosed a ClickFix delivery platform called ROMULUS used to distribute malware like Legion Loader. ROMULUS acts as a malware delivery service, using ClickFix-style lures on bogus landing pages to trick users into running malicious commands and infecting their own systems.