Security
Post #7912 · source on Telegram
Chris Titus Warns HWInfo and CPU-Z Compromised, Millions to Be PWNED
Description
A dark-mode X (Twitter) post from verified account Chris Titus Tech (@christitustech). The text reads: 'HWInfo and CPU-Z both compromised. Millions about to be PWNED!' followed by two labeled links: 'CPU Z:' with a hybrid-analysis.com/sample/eff5ece... URL and 'HW Monitor:' with hybrid-analysis.com/sample/4968501... URL, both pointing to malware sandbox analysis reports. The post alleges a supply chain compromise of two extremely popular Windows hardware monitoring/diagnostic utilities (CPU-Z and HWInfo/HWMonitor), tools routinely downloaded by PC enthusiasts, overclockers, and IT staff, making the blast radius of trojanized installers enormous
More like this
More like this in Security →
Use J and K for navigation
Comments
9Comment deleted
The one time CPU-Z reports a temperature spike that's actually accurate - it's the crypto miner it shipped with
The download promised hardware monitoring and delivered full-stack observability—for the attacker.
The post mentions HWInfo, but the link is for HWMonitor. These are different tools from different developers. HWInfo is unaffected. CPU-Z and HWMonitor from cpuid.com are compromised with malware. https://www.igorslab.de/en/warning-cpuid-suspected-of-being-a-virus-suspicious-hwmonitor-downloads-are-causing-alarm https://www.reddit.com/r/pcmasterrace/comments/1sh4e5l/warning_hwmonitor_163_download_on_the_official https://www.hwinfo.com/forum/threads/hwinfo-v8-42-released.11034 Comment deleted
What’s the fun thing today? Comment deleted
Literally look at their profile Comment deleted
looks like a harmless IT freelancer Comment deleted
Yeah and programming memes. Makes no sense to point it out to you, as if they were a bot or scammer, unless there's an obvious issue Comment deleted
I don't see the issue Comment deleted
same Comment deleted