Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware
Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware
20 October 2026
Cybersecurity researchers have disclosed details of a ClickFix delivery platform called ROMULUS that's being used to distribute malware such as Legion Loader.
According to Forescout Research - Vedere Labs, ROMULUS is akin to a malware delivery service that employs ClickFix-style lures on bogus landing pages to trick unsuspecting users into running malicious commands and infecting their own