⚠️ CPUID hacked to deliver malware via CPU-Z, HWMonitor downloads
-
️ CPUID hacked to deliver malware via CPU-Z, HWMonitor downloads“This malware is deeply trojanized, distributes from a compromised domain (cpuid-dot-com), performs file masquerading, is multi-staged, operates (almost) entirely in-memory, and uses some interesting methods to evade EDRs and/or AVs such as proxying NTDLL functionality from a .NET assembly.”
CPUID hacked to deliver malware via CPU-Z, HWMonitor downloads
Hackers gained access to an API for the CPUID project and changed the download links on the official website to serve malicious executables for the popular CPU-Z and HWMonitor tools.
BleepingComputer (www.bleepingcomputer.com)
-
️ CPUID hacked to deliver malware via CPU-Z, HWMonitor downloads“This malware is deeply trojanized, distributes from a compromised domain (cpuid-dot-com), performs file masquerading, is multi-staged, operates (almost) entirely in-memory, and uses some interesting methods to evade EDRs and/or AVs such as proxying NTDLL functionality from a .NET assembly.”
CPUID hacked to deliver malware via CPU-Z, HWMonitor downloads
Hackers gained access to an API for the CPUID project and changed the download links on the official website to serve malicious executables for the popular CPU-Z and HWMonitor tools.
BleepingComputer (www.bleepingcomputer.com)
@jbz Shitcanned.
-
R relay@relay.mycrowd.ca shared this topic