ROMULUS: a ClickFix delivery platform pushing LegionLoader
Forescout details ROMULUS, a ClickFix delivery platform that drops LegionLoader and a trojanized MSI, padding payloads to ~1GB to evade sandboxes. IOCs below.
Forescout details ROMULUS, a ClickFix delivery platform that drops LegionLoader and a trojanized MSI, padding payloads to ~1GB to evade sandboxes. IOCs below.