CPU-Z and HWMonitor have been hit by malware – CPUID responds

CPUID has been hit by a malware attack, and CPU-Z/HWMonitor downloads were affected

CPUID, the group behind CPU-Z and HWMonitor, were hit by a malware attack between April 9th and April 10th. The attack took place for “approximately six hours” and caused the website to display malicious links that would cause users to download malware. Once the attack was discovered, the CPUID website was taken offline.

An investigation into the attack is ongoing. CPUID is back online, and the breach has been fixed. Download links now work as intended, delivering users safe/signed files.

Anyone who downloaded CPU-Z or HWMonitor during the attack period should take steps to secure their PCs. Below is an official statement from CPUID regarding the breach.

Hi,

Investigations are still ongoing, but it appears that a secondary feature (basically a side API) was compromised for approximately six hours between April 9 and April 10, causing the main website to randomly display malicious links (our signed original files were not compromised). The breach was found and has since been fixed.

Sorry for the inconvenience. I did my best to fix that mess as soon as possible

:-/ Sam.

Thankfully, this breach was spotted quickly, and the CPUID website is now secure. That said, given the popularity of both CPU-Z and HWMonitor, it’s likely many PC enthusiasts have been affected by this malware.

You can join the discussion on CPUID being breached by malware makers on the OC3D Forums.