Hackers Use New ROMULUS ClickFix Platform to Deliver Malware and Evade Security Detection

Hackers Use New ROMULUS ClickFix Platform to Deliver Malware and Evade Security Detection

Hackers are using a newly identified platform called ROMULUS to deliver malware through ClickFix traps, combining hidden PowerShell scripts, altered software installers, and encrypted archives. The platform supports separate infection paths, including one that installs LegionLoader and another that abuses a legitimate Stardock program to load malicious code. The findings show how a single delivery […]

Forescout uncovers ROMULUS malware delivery platform behind ClickFix attacks

Forescout’s Vedere Labs has identified a previously undocumented malware delivery platform being used in ClickFix campaigns

ROMULUS Malware Server Leverages ClickFix to Deliver Multiple Payloads

Researchers at Forescout said the discovery shows how ClickFix is evolving from a delivery technique into full-blown cyber-criminal infrastructure Read more →