Back Overclock3D CPU-Z/HWMonitor have been hit by malware - CPUID responds - OC3D
CPUID, the group behind CPU-Z and HWMonitor, were hit by a malware attack between April 9th and April 10th. The attack took place for “approximately six hours” and caused the website to display malicious links that would cause users to download malware. Once the attack was discovered, the CPUID website was taken offline.
An investigation into the attack is ongoing. CPUID is back online, and the breach has been fixed. Download links now work as intended, delivering users safe/signed files.
Anyone who downloaded CPU-Z or HWMonitor during the attack period should take steps to secure their PCs. Below is an official statement from CPUID regarding the breach.
Investigations are still ongoing, but it appears that a secondary feature (basically a side API) was compromised for approximately six hours between April 9 and April 10, causing the main website to randomly display malicious links (our signed original files were not compromised). The breach was found and has since been fixed.
Sorry for the inconvenience. I did my best to fix that mess as soon as possible
Thankfully, this breach was spotted quickly, and the CPUID website is now secure. That said, given the popularity of both CPU-Z and HWMonitor, it’s likely many PC enthusiasts have been affected by this malware.
You can join the discussion on CPUID being breached by malware makers on the OC3D Forums .
A Northern Irish father, husband, and techie that works to turn tea and coffee into articles when he isn’t painting his extensive minis collection or using things to make other things.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
