🤖 Forescout's Vedere Labs documents ROMULUS, a ClickFix delivery platform run like a malware-as-a-service: bogus landing pages trick visitors into pasting and running PowerShell, dropping LegionLoader and other families, with payloads rotated per campaign.
🔗 https://thehackernews.com/2026/10/romulus-clickfix-platform-tricks-users.html
#Malware #ClickFix #InfoSec
The Hacker NewsHackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other MalwareROMULUS uses ClickFix lures and PowerShell scripts to deliver malware, including Legion Loader, across infrastructure spanning six IP addresses.