Legion Loader

Mentions · 7d0
Mentions · 30d2
All mentions2
First seenOct 20, 2026
Last mentioned10d ago

Timeline

2 articles · newest first

ClickFix attacks exploit Siemens Software Center DLL flaw to deploy a RAT

CVE-2026-110936, CVSS v4 8.4, is fixed in Siemens Software Center 4.0.9.8; abused builds sideloaded archive.dll via a signed copy.

The Hacker NewsOct 20, 07:11 UTC · 10d agoExploit / PoCExploitedCVE-2026-110936

ROMULUS ClickFix platform delivers Legion Loader and other malware

Forescout found six servers; PowerShell staging fetches a trojanized MSI or an archive containing Legion Loader.

The Hacker NewsOct 20, 04:05 UTC · 10d agoMalware2 · 1 read

Related CVEs

by mentions

CVE-2026-110936<1%8.4
DLL Search-Path Hijacking in Siemens Software Center
published 15d agoSiemens Software CenterKEV

Appears with

Romulusmalware · 2
Forescoutorganization · 2
Siemensvendor · 1
Satacommalware · 1
ChatGPTproduct · 1
RobotDroppermalware · 1
CurlyGatemalware · 1
Huntress Labsorganization · 1
Siemens Software Centerproduct · 1

Entities are extracted by the model from each article. First seen Oct 20, 2026, last mentioned 10d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.