Threat advisoriesMedium
ROMULUS ClickFix platform used to deliver LegionLoader and other malware
Forescout's Vedere Labs describes ROMULUS, a ClickFix delivery platform that works like a malware-distribution service and is used to spread Legion Loader through fake landing pages.

