
Malware & Ransomware
Forescout: ROMULUS ClickFix Backend Distributes LegionLoader via Six Servers
Analysts found a shared delivery backend using six servers to distribute LegionLoader and trojanized Stardock packages via social engineering.
Everything NetSec Tribune has reported about ClickFix: 2 stories, newest first. Part of our Cyber Attacks coverage.

Analysts found a shared delivery backend using six servers to distribute LegionLoader and trojanized Stardock packages via social engineering.

Attackers use fake verification steps to trick users into running commands, bypassing scanners and stealing credentials in widespread campaigns.