CYBER CODE RED

Get real-time updates on Telegram

ROMULUS Malware Server Leverages ClickFix to Deliver Multiple Payloads

Cybercriminals have started to adapt campaigns that deploy ClickFix tactics into an entire ecosystem which can be repeatedly used to deliver multiple forms of malware to victims, cybersecurity researchers have warned. As detailed in a blog post published on October 14, security analysts at Vedere Labs, a part of Forescout Research, discovered the server hosting panel ROMULUS while investigating an incident.

Published 17-Oct-2026 13:20 UTC · First seen 14-Oct-2026 15:01 UTC

Sources