Home / Technology / Malware Hijacks PC Tool Downloads
Malware Hijacks PC Tool Downloads
10 Apr
Summary
- Malware infiltrated free PC tools CPU-Z and HWMonitor downloads.
- The data-stealing malware targeted browser credentials.
- The malicious downloads were available for six hours.
Users who downloaded the popular PC monitoring tools CPU-Z and HWMonitor on April 9 and April 10, 2026, may have inadvertently installed malware. A hacker briefly compromised the official download site, CPUID.com, delivering a Trojan disguised as legitimate software. This malicious payload was reportedly active for approximately six hours, starting around 7 p.m. EST on April 9, 2026.
Investigations confirmed that the malware's primary objective was data theft, specifically targeting browser credentials. While the compromised files circulated on CPUID.com, they managed to bypass some antivirus software. The developer of CPU-Z stated that while the main website experienced issues, the original signed files were not compromised.
The exact method of the breach remains under investigation. However, security researchers noted similarities between the command-and-control server used in this attack and a previous incident involving a fake FileZilla website. The compromise was detected and fixed, restoring the integrity of the downloads.
