cpm attack