Siemens confirmed live exploitation of a DLL side-loading gap that let ClickFix lures smuggle a remote access trojan.