ROMULUS ClickFix kit pads LegionLoader to ~842 MiB to slip past scanner size limits. https://intel.threadlinqs.com/threat/TL-2026-3517 #ThreatIntel #ROMULUS #Satacom #LegionLoader

ROMULUS ClickFix kit pads LegionLoader to ~842 MiB to slip past scanner size limits. https://intel.threadlinqs.com/threat/TL-2026-3517 #ThreatIntel #ROMULUS #Satacom #LegionLoader
Fake Cloudflare CAPTCHA? Paste-and-run PowerShell drops LegionLoader - a memory-only backdoor. https://intel.threadlinqs.com/threat/TL-2026-2441 #ThreatIntel #Satacom #Legion #LegionLoader