Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware
ROMULUS uses ClickFix lures and PowerShell scripts to deliver malware, including Legion Loader, across infrastructure spanning six IP addresses.
More info