Temporary CPUID Site Breach Swapped Legitimate Downloads with Malware

Sat, 11 Apr 2026 12:24:00 +0200

CPUID, the company behind popular tools like HWMonitor and CPU-Z, experienced a brief security incident where parts of its backend were hijacked by attackers. During the breach, which lasted approximately six hours between April 9 and April 10, certain download links on CPUID's website were replaced with malware-laden files. Users reported unusual installer names and antivirus alerts, raising immediate concern across forums such as Reddit. The company confirmed that the compromise affected a secondary feature, essentially a side API, responsible for serving downloads, while the original software builds remained intact and properly signed. This distinction means the core software itself was not tampered with, but anyone who accessed downloads during the breach may have unknowingly downloaded malicious files. CPUID has since resolved the issue and is continuing investigations to ensure no further vulnerabilities exist. Users are advised to verify downloaded files against official sources