Links to multiple CPUID tools hijacked and used to drop an infostealer.
Download links were replaced by a Russian-speaking threat actor to distribute a recently emerged malware named STX RAT.
CPUID breach served STX RAT via trojanized CPU-Z downloads on April 9–10, impacting 150+ victims and multiple industries.