Hacked Cpu-z

Do not download the latest version.

DLL hijacked.

Remote hijack.

The fake files used a Russian-language installer with a customized "wrapped" InnoSetup wrapper, contained sandbox detection methods, and were designed to steal browser credentials while operating almost entirely in memory.

 

Update: It is now assumed (see the Bleeping Computer article , which followed up with the developer) that there was a supply chain attack on a third-party API, which could be used to manipulate the download links. Here is the developer's statement:

"Investigations are still ongoing, but it appears that a secondary feature (basically a side API) was compromised for approximately six hours between April 9 and April 10, causing the main website to randomly display malicious links (our signed original files were not compromised). The breach was found and has since been fixed."

^^ Updated ~24 hours ago: https://borncity.com/blog/2026/04/10/malware-website-die-cpuid-hwmonitor-cpu-z-etc-hostet-gehackt/ (Click the link top right that corresponds nearest to your language)

 

Here are the CVEs https://app.opencve.io/cve/?product=cpu-z&vendor=cpuid#:~:text=CVE,CVE-2025-51060

April 2026- https://gist.github.com/N3mes1s/b5b0b96782b9f832819d2db7c6684f84