CPUID Website Compromised, Serves Trojanized Downloads

Unknown attackers compromised the CPUID website, a popular resource for hardware diagnostic tools, on April 9, 2026, redirecting download links for CPU-Z and HWMonitor to malicious files and exposing users to a remote access trojan for approximately six hours.

The breach occurred between about 3 p.m. UTC on April 9 and 10 a.m. UTC on April 10, affecting the site's main download pages for the widely used utilities. CPUID, which provides tools for monitoring system specifications and performance, confirmed the incident stemmed from a compromised secondary API that altered legitimate links without tampering with the original software builds. "Investigations are still ongoing, but it appears that a secondary feature, basically a side API, was compromised for approximately six hours between April 9 and April 10, causing the main website to randomly display malicious links. Our signed original files were not compromised," a site owner stated on X. "The breach was found and has since been fixed."

Users who accessed the site during that window encountered trojanized installers, often disguised with misleading names like "HWiNFO_Monitor_Setup.exe." These files bundled legitimate...