Popular tools for computer diagnostics, CPU-Z i HWMonitorfound themselves at the center of a security incident after the official website of their developer, the company, was hacked CPUID.
CPU-Z and HWMonitor are among the most downloaded PC diagnostic tools. They are used by hardware enthusiasts, IT administrators and system engineers to read processor speed, temperature and power consumption. Their popularity makes the period of compromise very significant.
The attack was identified and removed, and CPUID said the original, digitally signed files remained safe. The problem, they say, arose solely because of compromised download links. However, users who downloaded CPU-Z or HWMonitor during that period could be at serious risk. Also, research by independent experts reveals that not everything is as CUPID claims. According to Securelist according to the report, at least 150 users were victims of this scam. That is why it is recommended to check the system, change passwords and run an antivirus scan.
VirustotalAnyone who downloaded the software from cpuid.com between approximately 16:00 CET on April 9 and 11:00 CET on April 10 could instead install backdoor malver.
As confirmed by Wccftechthe attack took place between April 9 and 10 and lasted almost 19 hours. Users who tried to download the latest versions of these tools then actually received files infected with malware. The same source confirms that the attackers did not compromise the installation files themselves, but took control of part of the site’s infrastructure. After that, they redirected users to malicious versions of the software.
What CPU-Z and HWMonitor users downloaded
The malware that was distributed through these fake installations was multi-layered and designed to steal data, primarily passwords from Internet browsers. It also used advanced techniques to avoid detection by antivirus programs and security systems.
This incident once again points to the growing trend of the so-called supply chain attacks. Through them, attackers target popular and trusted tools to distribute malware through seemingly legitimate channels. CPU-Z and HWMonitor are just another recent example of this type of attack.
Mr. Titus Tech is correct. cpuid-dot-com is indeed delivering malware right now.
As I began poking this with I stick I discovered this is not your typical run-of-the-mill malware. This malware is deeply trojanized, distributes from a compromised domain (cpuid-dot-com), performs… https://t.co/ubkXmG7LKV pic.twitter.com/jPlAMmpijN
— vx-underground (@vxunderground) April 10, 2026