Avatar

Aysia Renee’

@aysiiarenee

Avatar
reblogged
Avatar
uloelu

⚠️ ADVISORY: Malicious Mods, Identity Theft, Malware, and You ⚠️

Hey, all! Not sure how many people will see this, but if you do, please reblog. This is a 'little' post regarding a potentially big problem affecting the Sims 4 community. If you download mods/CC at all (and yes I know CC is a type of mod), this applies to you.

TL;DR: For the sake of your personal info, identity, bank account, et cetera, please STOP downloading any mods/CC for the time being. Especially from the following sites: CurseForge, ModTheSims, The Sims Resource. It doesn't matter if you know the creator or not. Give it at least a week while we all figure out what's going on. If you must, I would recommend only downloading directly from a creator's Patreon (assuming they have one).

Other people have written at length about the mods in question, so I'll just share their posts below.

What's going on?

From the Sims 4 After Dark Discord server (a server you should join if you're not in it already):

⚠️If you downloaded any mod listed in the above post and played the game with them installed, this is the cleaner program Kuttoe (creator of the Home Regions and Townie Demographics mods) mentioned in their post: GitHub - overwolf/sims4-social-events-cleaner: Source files and exe release for a tool to clean up your machine if you have downloaded the "Social Events - Unlimited Time" Sims 4 mod ⚠️

Got confirmation from Kuttoe that as long as you didn't boot up the game with the malicious mods installed (or deleted them completely from your computer before playing the game), you *should* be fine. Still, I recommend that anyone who thinks they might have downloaded any of them run the cleaner program.

Here's an explanation from @anadius2 (reposted by Kuttoe) in the Sims 4 After Dark server (not providing a link to prevent brigading or spam, but you can DM me and I'll give you the link) about what the malware will do to your computer:

And a little dive into the back-end coding stuff for the more tech-savvy Simmers out there:

So, to recap:

  • Fake mods were uploaded to Curseforge, ModTheSims, and The Sims Resource
  • @msqsimsofficial had their account compromised on 2 of those sites (they are a victim of hacking, so do not send them hate!)
  • If downloaded, these malicious mods have the ability to steal very sensitive info (your passwords, credit card info if saved somewhere in your browser, data)
  • As of right now, antivirus software may not be able to detect the malware
  • Mac and Linux users seem to be safe; Windows users are the ones that could be affected

Why is this happening?

Unsure. Lots of theories are being made by people far more knowledgeable than me, but from the looks of things, could be crypto bullshit and/or an attempt to steal your data and sell it. This is very, very serious, and could wreck your life if said data/personal info falls into the wrong hands.

It's always a good idea to change passwords every couple of months or so, but if you think you've been affected, you also need to change your passwords for things like online banking, email and social media accounts, healthcare sites AFTER running the cleaner.

What now?

I want to talk about how we approach modding our games and downloading files in general.

Please STOP downloading mod file folders from people who did not create the specific mods. Period. This includes Sim dumps, building/lots with CC, mod folders promoted on YouTube, etc. This does not mean that anyone sharing them is doing so maliciously. In fact, I appreciate the amount of effort people put into compiling these resources! But unless you're super careful (and super knowledgeable), you run the risk of downloading malware like this on your computer. Make no mistake, the malicious files in question look like run-of-the-mill, everyday mods. Two of them were even posted from a trustworthy creator's actual account! The only way to know what they actually do is to peek into the code, and idk about you, but I don't know Python. So even after this issue is resolved, you really should only download files from the creators themselves.

But what about CC shopping?

Here's how I like to approach it: I stick to lookbooks and combing through the Patreons/accounts of creators who make items I like. If I see a Sim dump with CC that I'm interested, I try to reach out to the poster and ask where they got specific CC. If I can't do that, I see if it was shared via Drive, look at the individual files themselves, then head to the original CC creator's official download page and get it from the source.

That's all I have for you! Stay safe, and happy Simming! 🫶🏾

Avatar
blewis50

Please read and share.

Avatar
reblogged
Avatar
sonyeesha

𝔾𝕚𝕧𝕖 ‘𝕖𝕞’ 𝕥𝕠𝕠 𝕞𝕦𝕔𝕙 𝕥𝕙𝕖𝕪 𝕗𝕠𝕣𝕘𝕖𝕥 𝕚𝕥’𝕤 𝕒 𝕡𝕣𝕚𝕧𝕚𝕝𝕖𝕘𝕖 🖤

Avatar
reblogged
Avatar
sonyeesha

𝓨𝓸𝓾𝓻𝓼, 𝓐𝓵𝔀𝓪𝔂𝓼 & 𝓕𝓸𝓻𝓮𝓿𝓮𝓻 ♥️

Avatar
reblogged
Avatar
sonyeesha

𝕀𝕤 𝕤𝕙𝕖 𝕞𝕖 𝕥𝕙𝕠? 𝔼𝕩𝕒𝕔𝕥𝕝𝕪 ❤️‍🔥

Avatar
reblogged

The Magnolia Residencies

not really playable until the issues with for rent are resolved.

Avatar
reblogged
Avatar
sonyeesha

𝕋𝕙𝕖 𝕠𝕟𝕝𝕪 “𝕃” 𝕀’𝕞 𝕥𝕒𝕜𝕚𝕟𝕘 𝕚𝕤 𝕥𝕙𝕖 𝕃𝔼𝔸𝔻 🩵

You are using an unsupported browser and things might not work as intended. Please make sure you're using the latest version of Chrome, Firefox, Safari, or Edge.