Siemens Software Center Ran Attackers' Code With a Valid Siemens Signature on PCs That Never Installed It

Tue, 20 Oct 2026 11:37:08 +0200

Canon, then Stardock, now Siemens. Attackers keep running their code behind a trusted signature. On October 19 Siemens confirmed its own signed program was the latest, on Windows PCs that never had it.

Here is what it looked like on a PC that got hit. A program called Siemens Software Center, sitting in the list of apps that start with Windows. On a machine that never had Siemens software on it. The owner did not put it there. It loaded on its own at startup.

Siemens on HackingPassion.com : root@HackingPassion.com-[~]

Siemens Software Center Ran Attackers' Code With a Valid Siemens Signature on PCs That Never Installed It