CPU-Z and HWMonitor compromised (theregister.com)

Article summary

The CPUID website was compromised, causing malware to be served to users who downloaded HWMonitor and CPU-Z tools. The breach occurred due to a compromised backend component and was fixed after approximately six hours. The malware targeted 64-bit HWMonitor users and attempted to steal browser data. The incident highlights the risk of supply chain attacks and the importance of verifying the integrity of downloaded software.

Main themes

• Supply chain security
• Malware attacks
• Software integrity
• Cybersecurity risks
• Compromised websites

What commenters say

• The attack on CPUID's website is an example of a evolving threat where attackers are compromising legitimate websites to serve malware, rather than relying on fake domains.
• Some commenters believe that using package managers like winget can help mitigate the risk of downloading malware from compromised websites.
• Others argue that the presence of sketchy ads on the CPUID website made it more likely for users to be tricked into downloading malware.
• There is a disagreement among commenters about whether the use of ad blockers and technical expertise can protect users from malicious downloads.
• Some commenters are concerned about the lack of information on how the compromise was achieved and the potential for similar attacks in the future.
• The incident highlights the importance of implementing robust security measures, such as file integrity checks and secure download protocols, to prevent similar attacks.