CPU-Z

Reported Context (4)

The CPUID website, popular in the PC hardware community, was recently hacked and altered to deliver malicious versions of CPU-Z, HWMonitor, and PerfMonitor. CPUID Website Compromise Served Trojanized Hardware-Utility Downloads
Unknown threat actors briefly compromised CPUID’s website (cpuid[.]com) and replaced download links for CPU-Z and HWMonitor with trojanized installers to serve malicious executables. CPUID Website Compromise Used Trojanized CPU-Z and HWMonitor Downloads to Spread STX RAT
API and altered official download links to serve a trojanized HWiNFO installer in place of the legitimate CPU-Z and HWMonitor binaries, exposing millions of users who downloaded from the site. CPUID Download Links Hijacked to Distribute Trojanized HWiNFO Installer
CPUID, maker of CPU-Z and HWMonitor, was compromised via a secondary API that redirected legitimate update requests to a malicious domain for about six hours between April 9 and April 10, delivering a trojanized CPUID Confirms Website Compromise That Redirected Updates to Malware

Malware (3)

MITRE ATT&CK (6)

Vendors (1)

Products (4)

Industries (6)

Countries (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.