News Summary

• Cybersecurity researchers have disclosed details of a ClickFix delivery platform called ROMULUS.
• The platform is being used to distribute malware such as Legion Loader.
• The findings indicate how ClickFix is evolving beyond a social engineering technique into a highly effective entry point for malware.
• To mitigate the threat, it's essential to hunt for suspicious PowerShell commands and DLL sideloading events, the researchers said.
• It's not known who is behind theROMULUS platform.
• However, it shares no overlaps with Romulus loader, a malware family associated with Silver Fox (aka TA4922)