/
malware_families:LegionLoader × limpar

Resultados

3 casos · pág. 1/1

infosecurity-magazine.com · medium

ROMULUS multi-payload ClickFix delivery platform found on six servers, delivering LegionLoader via 842 MiB padded executables

Researchers at Vedere Labs (Forescout Research) reported on October 14 that they found ROMULUS, a new multi-payload shared ClickFix delivery platform, while investigating an incident. The same malware from a separate ClickFix campaign was linked to another server tied to that incident, and that server hosted the ROMULUS panel. ROMULUS is …

itsecurityguru.org · high

Forescout exposes ROMULUS malware delivery panel behind ClickFix campaigns and links Lorem Ipsum and Axolotl loaders to Vice Society tradecraft

Forescout's Vedere Labs has documented ROMULUS, a previously unknown malware delivery platform used in ClickFix campaigns, and new delivery techniques for loaders tied to Vice Society ransomware activity. The server hosting the ROMULUS panel was found during an incident investigation, and six IP addresses exposed the same authentication i…