Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware

Cybersecurity researchers have uncovered a malware delivery platform called ROMULUS, which is used to spread malware such as Legion Loader. ROMULUS operates as a ClickFix-style delivery service, utilizing fake landing pages with lures to deceive users into executing malicious commands, resulting in infection. This platform is described as a malware delivery service that relies on user interaction to infect systems. The discovery was made by Forescout Research - Vedere Labs, who have disclosed details of the ROMULUS platform. The platform's use of bogus landing pages and ClickFix-style lures is a key component of its infection strategy. ROMULUS is being used to deliver various types of malware to unsuspecting users.