CPUID Hacked to Serve Trojanized CPU-Z and HWMonitor Downloads

The CPUID website was hacked to serve trojanized versions of popular hardware monitoring tools CPU-Z and HWMonitor, infecting over 150 victims across multiple sectors including manufacturing and telecommunications. Attackers compromised a secondary feature on the site for up to six hours, delivering legitimate software bundled with malware designed to deploy STX RAT, which steals browser credentials and cryptocurrency wallets. Security researchers have linked this attack to a 10-month campaign by a Russian-speaking threat actor that has also targeted other software distribution sites.