LegionLoader

ROMULUS ClickFix Platform Exploited to Deliver LegionLoader and Secondary Malware

Researchers from Forescout - Vedere Labs have identified ROMULUS, a ClickFix-style malware delivery platform used by threat actors to distribute LegionLoader and other malware. The campaign employs bogus landing pages with deceptive lures that trick users into executing malicious commands, resulting in infection.