CPU-Z and HWMonitor reportedly compromised; users warned

April 10, 2026
hardware
Screen displaying COVID-19 cases and deaths statistics with map.
Photo by Markus Spiske on Pexels

Summary

It has been reported that downloads of popular system utilities HWMonitor and CPU‑Z may have been compromised, according to posts on Reddit and discussions circulating on Hacker News. The warnings center on an allegedly infected installer for HWMonitor 1.63 obtained from what appeared to be the official distribution site, and users have raised concerns that CPU‑Z downloads could be affected as well. Trust is frayed — and fast.

What happened

Users on community forums say they noticed antivirus alerts and unexpected network activity after installing the affected packages, prompting deeper inspection and public alarms. It has been reported that the files in question were available from the official download pages for a period of time before the issue was spotted. Allegedly, the compromised installers contained additional, unwanted code; specifics and attribution remain unclear while investigations continue.

What users should do

If you recently downloaded HWMonitor 1.63 or a fresh copy of CPU‑Z, stop and check. Run a full antivirus/antimalware scan, compare checksums with vendor-published values where available, and consider restoring from a known-clean backup or reimaging if you see signs of compromise. Downloading installers only from the official vendor site and verifying digital signatures are small hassles that pay off. When in doubt, disconnect affected machines from the network and seek help — better safe than sorry.

Why it matters

These are tools used by enthusiasts, technicians, and IT pros to inspect machines — the very people you’d think would spot a dirty installer. When trusted utilities become attack vectors, it’s a supply‑chain problem, plain and simple. Remember SolarWinds? This feels like the same playbook: compromise a point everyone assumes is safe. The emotional sting is real — betrayal by the tools you depend on — and it’s a reminder to treat downloads, even familiar ones, with healthy suspicion.

Sources: reddit.com, Hacker News