What is STX RAT malware?

STX RAT is a remote access trojan with infostealing, HVNC, and post-exploitation tricks — think full remote control without you noticing.

Did CPUID breach affect Windows only?

Yes, focused on Windows exes via DLL side-loading in CPU-Z and HWMonitor installers.

How to check if I got STX RAT from CPU-Z?

Run full AV scans (Kaspersky, Malwarebytes), check for CRYPTBASE.dll, monitor unusual network to those C2 domains.

🦠 Ransomware & Malware

150+ Victims Hit in CPUID Breach [STX RAT Trojan]

Imagine downloading your trusty CPU-Z to check your rig's specs—only to hand attackers your entire desktop. That's what hit over 150 users when CPUID's site got pwned, serving STX RAT malware in trojanized installers.

CVE Watch Apr 14, 2026 4 min read

Malicious CPU-Z download warning on compromised CPUID website with STX RAT alert

⚡ Key Takeaways

CPUID.com breached for 24 hours, trojanizing CPU-Z/HWMonitor with STX RAT via DLL side-loading. 𝕏
150+ victims, mainly Brazil/Russia/China; orgs in retail/manufacturing hit too. 𝕏
Attackers' big mistake: reusing C2 from prior FileZilla campaign, exposing low opsec. 𝕏
Unique insight: Signals rise of AI-fueled amateur malware mimicking legit tools. 𝕏