Hackers are using a newly identified platform called ROMULUS to deliver malware through ClickFix traps, combining hidden PowerShell scripts, altered software installers, and encrypted archives. The platform supports separate infection paths, including one that installs LegionLoader and another that abuses a legitimate Stardock program to load... Weiterlesen: Hackers Use New ROMULUS ClickFix Platform to Deliver Malware and Evad…
Intelligence View
⚡ tsecurity.de Intelligence
Hackers Use New ROMULUS ClickFix Platform to Deliver Malware and Evade Security Detection
Hackers are using a newly identified platform called ROMULUS to deliver malware through ClickFix traps, combining hidden PowerShell scripts, altered software…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1059TA0002 · Execution
Command and Scripting Interpreter
Mitigation: M1038 Execution Prevention & Script Block Logging
Quelle: Kontext-Klassifikation des Artikeltextes
Execution
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
6 Quellen
CVE-2026-85505 | FreeIPMI up to 1.6.18 ipmi-oem ipmi-oem-fujitsu.c ipmi_oem_fujitsu_get_sel_entry_long_text stack-based overflow (Nessus ID 349117 / WID-SEC-2026-4155)
5 weitere Quellen
VVulDB Updatesvor 2 Std.CVE-2026-85504 | FreeIPMI up to 1.6.18 Fujitsu Sel String ipmi-sel-string-fujitsu-irmc-common.c _ipmi_sel_oem_fujitsu_get_sel_entry_long_text buffer overflow (Nessus ID 349117 / WID-SEC-2026-4155) VVulDB Updatesvor 2 Std.CVE-2026-85507 | FreeIPMI up to 1.6.18 ipmi-oem ipmi-oem/ipmi-oem-dell.c _output_dell_system_info_cmc_info stack-based overflow (Nessus ID 349117 / WID-SEC-2026-4155) VVulDB Updatesvor 2 Std.CVE-2026-85506 | FreeIPMI up to 1.6.18 idrac-info ipmi-oem/ipmi-oem-dell.c _get_dell_system_info_idrac_info buffer overflow (Nessus ID 349117 / WID-SEC-2026-4155) VVulDB Updatesvor 1 Std.CVE-2026-85508 | FreeIPMI 1.6.18 ipmi-oem ipmi-oem/ipmi-oem-dell.c _output_dell_system_info_cmc_ipv6_info buffer overflow (Nessus ID 349117 / WID-SEC-2026-4155) VVulDB Updatesvor 1 Std.CVE-2026-85509 | FreeIPMI up to 1.6.18 Fru ipmi-fru.c _read_fru_data stack-based overflow (Nessus ID 342824 / WID-SEC-2026-4155)
6 Quellen
Apple patches CoreGraphics flaw exploited on older iPhones
5 weitere Quellen
CCyber Security Newsvor 3 Std.Apple Patches Actively Exploited iOS Zero-Day Allowing Remote Code Execution GGBHackers Securityvor 2 Std.Apple Fixes Actively Exploited iOS Zero-Day Vulnerability in CoreGraphics CCyber Security Newsvor 4 Std.Apple Released Patches for Exploited CoreGraphics 0-day Vulnerability for Older iPhones IIT Security Newsvor 2 Std.Apple Fixes Actively Exploited iOS Zero-Day Vulnerability in CoreGraphics BBleepingComputervor 3 Std.Apple backports CoreGraphics zero-day patches to older iPhones
6 Quellen
Alibaba’s Qwen AI Model Attempts to Upload Files to China While Performing Cybersecurity Tasks
5 weitere Quellen
CCSO Onlinevor 2 Std.Alibaba AI model tried to send data to Beijing server, Cohere says CCyber Security Newsvor 5 Std.Alibaba’s Qwen AI Model Attempts to Send Data to China Without User Permission GGBHackers Securityvor 4 Std.Alibaba’s Qwen AI Model Attempts to Upload Files to China While Performing Cybersecurity Tasks IInfoWorldvor 2 Std.Alibaba AI model tried to send data to Beijing server, Cohere says CCyber Security Newsvor 5 Std.Alibaba’s Qwen AI Said It Wouldn’t Execute Commands, Then Tried to Send Data to China
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4277053/malware-trojaner-viren/hackers-use-new-romulus-clickfix-platform-to-deliver-malware-and-evade-security-detection/