Forescout detailed ROMULUS, a ClickFix delivery platform distributing Legion Loader. It industrializes social-engineered execution, making initial access scalable and harder to detect. Review controls for user-executed commands. #ClickFix #LegionLoader #ThreatIntel
https://cyberworldops.eu/en/romulus-turns-clickfix-lures-into-a-delivery-pipeline-for-legion
CyberWorldOpsROMULUS Turns ClickFix Lures Into Legion Loader DeliveryForescout Vedere Labs describes ROMULUS, a delivery platform using ClickFix lures and PowerShell to install Legion Loader for further payloads.