CPUID

Reported Context (6)

CPUID Downloads Hijacked to Serve STX RAT—Unknown threat actors hijacked the official CPUID download page to serve trojanized installers that ultimately led to the deployment of STX RAT, a remote access trojan with Weekly Cybersecurity Recap Covers Vercel Breach, Malware Campaigns and QEMU Abuse
Hackers hijacked CPUID downloads, served STX RAT to victims Week in review: Acrobat Reader zero-day, AI agent risks and security developments
The CPUID website, popular in the PC hardware community, was recently hacked and altered to deliver malicious versions of CPU-Z, HWMonitor, and PerfMonitor. CPUID Website Compromise Served Trojanized Hardware-Utility Downloads
A trojanized CPUID HWMonitor installer was used to deliver a multi-stage, fileless malware chain that leverages trusted Windows binaries (PowerShell, MSBuild, regsvr32) to execute scriptlet payloads such as Clippy.sct Trojanized HWMonitor Installer Uses Obfuscated Scriptlets to Load Fileless .NET Payload
Attackers gained access to a CPUID side API and altered official download links to serve a trojanized HWiNFO installer in place of the legitimate CPU-Z and HWMonitor binaries, exposing millions of users who downloaded CPUID Download Links Hijacked to Distribute Trojanized HWiNFO Installer

CVE (4)

Malware (17)

People (2)

Threat Actors (9)

MITRE ATT&CK (17)

Vendors (9)

Products (28)

Tools (5)

Industries (14)

Countries (17)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.