Topic analysis

CPU-Z and HWMonitor compromised

Between April 9 and 10, 2026, attackers compromised a backend API on CPUID's website, leading to trusted download links for tools like CPU-Z and HWMonitor being replaced with malicious ones over a six-hour window. The delivered malware targeted 64-bit HWMonitor users, using a fake CRYPTBASE.dll to connect to a command-and-control server, access browser credentials, and run in-memory payloads; analysis links the attack to prior campaigns targeting FileZilla users, and CPUID has since fixed the breach while investigations into the API compromise and affected user count continue.