NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#legion-loader

0 stories this week · 2 this month · 2 in 6 months · mostly security

Stories per day · 30 days

Relatedclickfix2 romulus2 dll-sideloading1 malware-delivery1 powershell1 siemens1

2 stories, newest first · one card per story

The Hacker News10d agohigh

ClickFix attacks exploit Siemens Software Center DLL flaw to deploy a RAT

CVE-2026-110936, CVSS v4 8.4, is fixed in Siemens Software Center 4.0.9.8; abused builds sideloaded archive.dll via a signed copy.

Exploited2 min readsiemens clickfix

The Hacker News10d agohigh

ROMULUS ClickFix platform delivers Legion Loader and other malware

Forescout found six servers; PowerShell staging fetches a trojanized MSI or an archive containing Legion Loader.

2 min readclickfix romulus

2