ROMULUS ClickFix platform is being used to trick people into installing LegionLoader and other malware

Attackers are using a new malware-delivery platform called ROMULUS to trick people into infecting their own computers through fake verification or troubleshooting prompts. The campaign uses the ClickFix technique, which typically tells users to copy, paste, or run commands themselves, and is being linked to payload delivery including LegionLoader and additional malware. The article indicates an active criminal delivery service rather than a one-off incident, with social-engineering as the main access vector.