CPUID Website Compromised to Deliver Weaponized HWMonitor and CPU

Cybersecuritynews •Guru Baran • April 10, 2026

The cpuid-dot-com website, to widely used system utilities CPU-Z and HWMonitor, is at the center of an active supply chain security incident. Users downloading HWMonitor 1.63 or CPU-Z ZIPs since early April have reportedly received trojanized installers capable of dropping malicious DLLs, evading antivirus detection through in-memory execution, and establishing connections to attacker-controlled infrastructure. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CPUID Website Breach Serves Malware via CPU-Z and HWMonitor Downloads The CPUID website was compromised for approximately six hours between April 9 and April 10, 2026, allowing attackers to hijack download links for popular utilities CPU-Z and HWMonitor. Users who attempted to download these tools received trojanized installers, specifically a file named 'HWiNFO_Monitor_Setup.exe,' which triggered antivirus alerts. The malware is designed to steal sensitive data, including browser credentials, and employs advanced evasion techniques to bypass detection. CPUID confirmed that the original software files were not compromised, but the attack exploited a secondary API feature. Security researchers noted that the malicious downloads were flagged by multiple antivirus engines. The breach has since been fixed, and CPUID is now serving clean versions of the software. Users are advised to check for any installations during the attack period and take necessary precautions. 16 sources 68

CPUID Website Compromised to Deliver Weaponized HWMonitor and CPU

The full story

Extracted Entities

Attack Types (3)

Companies (1)