Malware
RomulusLoader
- First Reported
- Oct 19, 2026
- Latest Reported
- Oct 20, 2026
Reported Context (2)
- As of writing, it's not known who is behind the ROMULUS platform. However, it shares no overlaps with RomulusLoader, a malware family associated with Silver Fox (aka TA4922), a China-aligned threat actor known for ROMULUS ClickFix Platform Delivers LegionLoader and Other Malware
- The second chain executes RomulusLoader and ultimately retrieves VulcanRAT207.B over TCP port 1234. Researchers Detail VulcanRAT207.B Chain Using RomulusLoader, SYSTEM Persistence and Driver Evasion
Malware (7)
People (2)
Threat Actors (2)
MITRE ATT&CK (16)
Vendors (2)
Products (3)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.