A Fake ChatGPT Helper, a Pasted Command and a Signed Siemens App: Five Places to Stop the Latest ClickFix Attack
Attackers are steering people from rogue ChatGPT custom GPTs to fake pages that ask them to paste a command, then using a legitimate, signed Siemens program to load their remote access malware. Here are the five points where the chain can be broken.
ClickFix tricks are not new: a web page shows a fake CAPTCHA or error and tells the visitor to paste a command into their computer to “fix” it. What is getting attention this week is how polished the newest chain has become. It starts inside rogue custom GPTs on ChatGPT, and it ends with a genuine, digitally signed copy of Siemens Software Center quietly loading a remote access trojan.
The Hacker News pieced together the chain from Siemens’ advisory and Huntress research, and SecurityWeek added Siemens’ own account of how its software was abused.
The short version
According to Huntress, some campaigns use malicious custom GPTs to send people to a fake web address. That page serves the ClickFix lure. Once the victim copies and runs the command, PowerShell drops an installer, msiexec.exe launches a package called AllMyBasic.msi, and that package starts SiemensSoftwareCenter.exe. Because version 3.5.8.7, the newest at the time, loaded helper files from its own folder without checking them, the attackers’ archive.dll placed beside it ran with the program’s trust. Siemens tied the activity to Romulus, a ClickFix delivery platform that Forescout described last week.
Exit ramp 1: the chatbot that sends you somewhere else
A custom GPT looks like part of a trusted service, but anyone can build one. When an AI assistant pushes you to an outside site to download or “verify” something, treat the link as you would one in an unexpected email.
Exit ramp 2: the page that asks you to paste a command
This is the single most important rule. No real CAPTCHA, browser check or support page needs you to open the Run box, a terminal or PowerShell and paste text into it. Stopping here ends the attack before any malware touches the computer.
Exit ramp 3: PowerShell launching from a browser session
Security teams can watch for PowerShell starting right after a user was browsing, especially when it reaches out to download something. Researchers recommend hunting for suspicious PowerShell commands as a core defense against this family of attacks.
Exit ramp 4: an installer that lands in a user’s profile
Siemens suggests looking for SiemensSoftwareCenter.exe running from AppData\Local\Programs and started by msiexec.exe. A Siemens software manager turning up on a laptop whose owner never installed any Siemens products is a red flag in itself.
Exit ramp 5: a trusted program loading a stranger’s file
Because the Siemens file is legitimate, hash-based blocking will not catch it, so Siemens advises focusing on behavior and on the folders tied to the malware. The vulnerability, CVE-2026-110936 (CVSS v4 score 8.4), is fixed in version 4.0.9.8; existing installations pick up the fix the next time the program starts. Siemens also published indicators to block, including the domain wizardexpensive[.]com and the addresses 96.62.218[.]59 and 2.27.248[.]127.
Why this is trending
- It pairs two things people trust: an AI chatbot and a signed program from a major industrial brand.
- Siemens says none of its systems, products or update channels were breached to its knowledge; the attackers simply carried a real copy of its software along with them.
- Romulus appears to be reusable. Forescout found the platform on several servers and saw it deliver LegionLoader and a trojanized installer that abused a Stardock application in the same way. Who runs it is unknown: Forescout says it could be a private tool, a service sold to criminals, an affiliate program or software copied between groups.
What this means for your company
Your strongest defense costs nothing: tell everyone, in one sentence, that no legitimate website will ever ask them to paste a command into their computer, and that they should call IT if one does. Back it up with everyday accounts that lack administrator rights, rules that limit PowerShell for staff who never use it, and endpoint monitoring that flags new installers running from user folders. If anyone at your company uses Siemens Software Center, make sure it is on 4.0.9.8 or later.
Need help locking down PowerShell, training staff on ClickFix lures or monitoring endpoints for this kind of activity? Reach out to Layer 7 Data Solutions to discuss how we’ve helped companies similar to yours.
About The Author
