Security News Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware TheHackerNews Daniel Bender 20 Oct 2026 Share ROMULUS uses ClickFix lures and PowerShell scripts to deliver malware, including Legion Loader, across infrastructure spanning six IP addresses.