Who loads the CPU-Z, HWMonitor during April 9-11, be careful.
Several Reddit users posted warning that there was an anomaly between downloading popular specification viewers like CPU-Z and HWMonitor from the developer of CPUID. The latter found that the files could be embedded in malware, so that concerns arose that the company's website or download system might be hacked.
.
Reports about this event began to appear during the evening of April 10, 2026 at UTC time. UTC, with the user stating that when pressing Update the program through Pop-up, it will take to the CPUID website page as usual, but the downloaded file has a wrong name, such as "HWiNFO _ Monitor _ upSet.exe," rather than the program's original file name.
.
After the download, Windows Defender immediately notified the file that it was malicious, and when it was checked through VirusTotal, it was discovered that it had been detected as a trojan by more than 30 security software.
.
According to vx-underground analysts, this malware is complex to some extent, multi-stage malware or multi-stage malware, and works primarily in memory to evade detection. In addition, the address of the remote control server or C2 is embedded within the file, allowing attackers to take control of the victim's machine and access important information such as passwords, usage information or financial information.
.
According to the data, there is a possibility that the CPUID download channel has been interfered with or redirected, causing some users to receive malware-addicted files instead of the actual installer, and possibly to reach the update system within the program. There is no official confirmation that the CPUID website has been hacked. CPUID has now temporarily closed the website to stop releasing the progam download for verification.
.
Experts recommend that those who have just downloaded or updated the CPU-Z and HWMonitor during this phase, rush to thoroughly scan the machine, change the key account's password, and enable two-step identity confirmation as soon as possible, to prevent further potential damage.
.
Source: HKEPC, igorslab, videocardz
