Threat actors compromised the CPUID website and spread STX RAT through fake CPU-Z and HWMonitor downloads.
Attackers breached the website CPUID and replaced download links for CPU-Z and HWMonitor with malicious files for several hours. Users who downloaded them got infected with the STX RAT, giving attackers remote access to their systems. The short attack window still exposed many users to compromise.
Investigations show attackers compromised a secondary API for about six hours, causing the site to display malicious links. The maintainers of the website confirmed that the original signed files remain safe, and the issue has been fixed.
Here is the small statement I sent to everyone… 😓
Hi,
Investigations are still ongoing, but it appears that a secondary feature (basically a side API) was compromised for approximately six hours between April 9 and April 10, causing the main website to randomly display… https://t.co/ZfHRoWwkOM
Kaspersky reported that on April 9, 2026, the CPUID website was compromised, and download links for tools like CPU-Z and HWMonitor were redirected to malicious domains for several hours. Attackers used these sites to distribute infected installers, and Kaspersky published related indicators of compromise.
“We observed that starting from approximately April 9, 15:00 UTC, until about April 10, 10:00 UTC, the legitimate download URLs for installers of that software have been replaced” states Kaspersky. “with URLS to the following malicious websites:
vatrobran[.]hr.
cahayailmukreatif.web[.]id;
pub-45c2577dbd174292a02137c18e7b1b5a.r2[.]dev;
transitopalermo[.]com;
Kaspersky found that attackers distributed trojanized CPU-Z and HWMonitor installers with a malicious DLL (“CRYPTBASE.dll”) using DLL sideloading. The DLL handled C2 communication, anti-sandbox checks, and payload delivery, reusing infrastructure from a previous fake FileZilla campaign.
“The interesting part here is that the attackers reused both the C2 address and the connection configuration from the March 2026 campaign where the attackers hosted a fake FileZilla (an open-source FTP client) site distributing malicious downloads.” continues the report. “The configuration embedded in the DLL is presented further. The “referrer” field in the configuration equals “cpz” which tends to be a shorthand for “CPU-Z”.”
The attack ultimately deployed a sophisticated RAT after multiple staged loaders. Attackers reused the known STX RAT, making detection easier thanks to existing rules. Despite compromising a popular software site, they failed to evade detection. Researchers found over 150 victims, mainly individuals but also organizations across multiple sectors, with most cases in Brazil, Russia, and China.
Kaspersky experts advise checking DNS logs and systems for signs of infection.
“Compared to other recently occurred watering hole and supply chain attacks, such as the Notepad++ supply chain attack, the attack on the cpuid.com website was orchestrated quite poorly.” concludes the report. “The gravest mistake attackers made was to reuse the same infection chain involving STX RAT, and the same domain names for C2 communication, from the previous attack related to fake FileZilla installers.”
For three decades, the Subaru Outback has occupied a unique corner of the automotive world, carving out a niche that sits comfortably between a family wagon and a mountain-climbing SUV. With over three million sold since its debut, the Outback has become the literal and figurative utility player of the Subaru lineup.
Now entering its seventh generation, the 2026 Outback arrives when the average new vehicle price is at an all-time high, yet Subaru has kept its starting MSRPs reasonable, even dropping them in some instances. If you’re cross-shopping the Outback against other mid-size crossovers, here are the six best things about the 2026 Subaru Outback.
6
Affordable
High-value MSRP relative to the national average
One of the most compelling arguments for the 2026 Outback is its value proposition. While the average price of a new vehicle is hovering around or above $50,000, the Outback starts significantly lower.
The entry-level Premium begins at $36,445 (including destination), a figure that undercuts many rivals while still including standard all-wheel drive and a comprehensive suite of tech and safety features. Even the feature-heavy Touring XT and Wilderness trims typically stay under that $50,000 national benchmark, making the Outback a financially savvy choice for families.
Here is a fast trim level breakdown. The starting MSRP figures include the $1,450 destination fee.
Base Trim Engine
2.5-liter four boxer
Base Trim Transmission
CVT
Base Trim Drivetrain
All-Wheel Drive
Premium
Starting MSRP: $36,445
Heated seats.
Black rear badging.
Cargo tonneau cover.
Leather-wrapped steering wheel
Power rear gate w/ automatic close.
Removable rear trailer hitch bumper cover.
18-inch aluminum-alloy wheels w/ dark gray finish.
An optional package for the Premium adds rain-sensing wipers, cloud-based navigation, a wireless smartphone charger, a heated steering wheel, and a moonroof for $2,270.
Limited
Starting MSRP: $43,165
Navigation.
Power moonroof.
Harman Kardon stereo.
Wireless smartphone charger.
Heated rear seats and steering wheel.
18-inch aluminum-alloy wheels w/ matte black finish.
Two optional packages are available for the Outback Wilderness. The first adds a moonroof, navigation, and a surround-view monitor for $2,045.
The second includes those, plus Nappa leather seats with copper stitching, ventilated front seats, a 12-way power-adjustable driver’s seat, and an eight-way power-adjustable passenger seat for an additional $4,090.
581-mile range, standard AWD, and updated safety features.
5
Two capable powertrain options
Standard Symmetrical AWD
Credit: Subaru
Two Boxer (i.e., horizontally opposed) engines are available for the 2026 Outback, depending on the trim level. Premium, Limited, and Touring feature a naturally aspirated 2.5-liter four-cylinder with 180 horsepower (5,800 rpm) and 178 lb-ft. of torque (4,800 rpm).
Limited XT, Touring XT, and Wilderness have a 2.4-liter turbocharged four-cylinder with 260 horsepower (5,600 rpm) and 277 lb-ft. of torque (2,000 to 4,800 rpm). Despite being a turbo engine with a higher power output, it does not require premium fuel.
The X-MODE system is also standard, which can be used on a muddy path, a gravel road, or during a snowstorm. X-MODE uses the same sensors as the Symmetrical All-Wheel Drive system, making additional adjustments to the Outback to ensure the best possible traction.
4
Significant tech leap with Snapdragon power
Owners can create individual profiles
Subaru has addressed the issue of infotainment lag, one of the biggest complaints from previous owners. The 2026 Outback features an all-new infotainment system, with navigation map swipe now up to three times faster, audio screen transitions up to six times faster, and overall scroll response up to two times faster. Notable updates and improvements include:
Optimized Display: A 12.1-inch higher-resolution touchscreen replaces the previous 11.6-inch unit. The screen reduces unwanted glare and light reflections by up to 80%.
Better Graphics: Powered by a Snapdragon 8 Automotive Processor, it features an octa-core architecture and an Adreno GPU.
More Memory: Approximately 2.5 times faster computing performance, with memory doubled from 4 GB to 8 GB and storage expanded from 64 GB to 128 GB.
Connectivity: Supports wireless Android Auto and Apple CarPlay, HD Radio, Bluetooth phone and audio streaming, Google Built-in services (Google Assistant/Maps), and automatic updates.
Personalization: Owners can create individual profiles and configure the 12.3-inch digital gauge cluster to highlight certain features and information. The 12.3-inch cluster is also new for the 2026 Outback.
While the overhauled infotainment system is a selling point, one current 2026 Outback owner has reported that Apple CarPlay functionality and the wireless charging pad don’t always work as intended.
Brand
AstroAI
Capacity
Up to 8 car tires (single charge)
This AstroAI mini tire inflator is perfect for keeping in your glove box when traveling. It’s portable and battery powered, meaning you don’t have to plug it in to use it. Plus, you’re able to set the exact tire pressure you want it to inflate to and it’ll automatically stop when it reaches that pressure.
3
Return of physical climate controls
Small things add up
Credit: Subaru
In a rare move that prioritizes driver ergonomics over minimalist trends, Subaru has brought back physical buttons and knobs for the climate control system. While the large 12.1-inch screen handles navigation and media, the often-used functions, like cabin temperature and fan speed, can now be adjusted by feel without taking your eyes off the road.
According to the J.D. Power 2025 U.S. Initial Quality Study, infotainment touchscreens are the study’s most problematic category, with consumers expressing a general dislike for what is sometimes described as “infotainment creep.” Subaru’s decision to have physical buttons for some of the most common vehicle functions is a small change that buyers are likely to appreciate.
Better than a generic tablet glued to the dashboard.
2
Advanced “hands-off” driving system
Using GPS and 3D maps
Every 2026 Outback is standard with Subaru’s EyeSight package, which includes active safety features such as haptic steering wheel alerts, automatic emergency steering, lane keep assist, blind-spot and rear cross-traffic warnings, and reverse automatic braking.
Also standard is a feature called Emergency Stop Assist, which will stop the 2026 Outback if the driver becomes unresponsive while using the adaptive cruise control. Once stopped, the Outback can activate the hazard lights, unlock the doors, and call 911.
The Touring and Touring XT are standard with Highway Hands-Free Assist. Using GPS data and 3D high-definition maps, the system can manage steering, braking, and lane changes on compatible highways with an attentive driver. Highway Hands-Free Assist does require an active MySubaru Companion or Companion+ subscription, which typically includes a five-year trial for 2026 models.
1
Genuine off-road capability
Plenty of ground clearance
Credit: Subaru
Unlike many “soft-roaders” that simply add plastic cladding, the 2026 Outback offers hardware that backs up its muscular look, especially with the Wilderness model.
Every Outback comes with at least 8.7 inches of clearance to begin with, but the Wilderness trim bumps that to 9.5 inches. Combine that with the all-terrain Bridgestone Dueler tires, electronically controlled dampers, all-weather floormats, and ladder-style roof rails, and the 2026 Outback Wilderness is the ideal weekend getaway vehicle.
Wilderness models also have a variation of X-MODE called Dual Mode, which includes specific settings for snow, dirt, and mud, along with hill descent control.
Red carpet treatment, even if you buy something used.
Charitable causes and factory warranty
While the 2026 Subaru Outback makes a strong case for itself through an optimized infotainment system and rugged hardware, the ownership experience extends beyond the driver’s seat. For many buyers, the appeal of a Subaru lies in the brand’s alignment with social and environmental causes.
A prime example is the Subaru Love-Encore program launched in partnership with Gifts for Good. The program invites new customers back to the Subaru dealer about two weeks after purchase to meet with a staff member who can answer any questions they have about their new Subaru.
At that time, customers can choose either a mission-aligned product or direct the gift’s value to charity. Each physical gift is an ethically sourced product that comes with a story card, so customers can read about the impact the gift selection has made. Customers also have the option to redeem the gift’s value towards a charitable cause.
Every 2026 Subaru Outback has a three-year/36,000-mile bumper-to-bumper warranty and a five-year/60,000-mile powertrain warranty.
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional
Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes.The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
April 13, 2026
