⚠️ ADVISORY: Malicious Mods, Identity Theft, Malware, and You ⚠️
Hey, all! Not sure how many people will see this, but if you do, please reblog. This is a 'little' post regarding a potentially big problem affecting the Sims 4 community. If you download mods/CC at all (and yes I know CC is a type of mod), this applies to you.
TL;DR: For the sake of your personal info, identity, bank account, et cetera, please STOP downloading any mods/CC for the time being. Especially from the following sites: CurseForge, ModTheSims, The Sims Resource. It doesn't matter if you know the creator or not. Give it at least a week while we all figure out what's going on. If you must, I would recommend only downloading directly from a creator's Patreon (assuming they have one).
Other people have written at length about the mods in question, so I'll just share their posts below.
What's going on?
From the Sims 4 After Dark Discord server (a server you should join if you're not in it already):
Got confirmation from Kuttoe that as long as you didn't boot up the game with the malicious mods installed (or deleted them completely from your computer before playing the game), you *should* be fine. Still, I recommend that anyone who thinks they might have downloaded any of them run the cleaner program.
Here's an explanation from @anadius2 (reposted by Kuttoe) in the Sims 4 After Dark server (not providing a link to prevent brigading or spam, but you can DM me and I'll give you the link) about what the malware will do to your computer:
And a little dive into the back-end coding stuff for the more tech-savvy Simmers out there:
- Fake mods were uploaded to Curseforge, ModTheSims, and The Sims Resource
- @msqsimsofficial had their account compromised on 2 of those sites (they are a victim of hacking, so do not send them hate!)
- If downloaded, these malicious mods have the ability to steal very sensitive info (your passwords, credit card info if saved somewhere in your browser, data)
- As of right now, antivirus software may not be able to detect the malware
- Mac and Linux users seem to be safe; Windows users are the ones that could be affected
Why is this happening?
Unsure. Lots of theories are being made by people far more knowledgeable than me, but from the looks of things, could be crypto bullshit and/or an attempt to steal your data and sell it. This is very, very serious, and could wreck your life if said data/personal info falls into the wrong hands.
It's always a good idea to change passwords every couple of months or so, but if you think you've been affected, you also need to change your passwords for things like online banking, email and social media accounts, healthcare sites AFTER running the cleaner.
What now?
I want to talk about how we approach modding our games and downloading files in general.
Please STOP downloading mod file folders from people who did not create the specific mods. Period. This includes Sim dumps, building/lots with CC, mod folders promoted on YouTube, etc. This does not mean that anyone sharing them is doing so maliciously. In fact, I appreciate the amount of effort people put into compiling these resources! But unless you're super careful (and super knowledgeable), you run the risk of downloading malware like this on your computer. Make no mistake, the malicious files in question look like run-of-the-mill, everyday mods. Two of them were even posted from a trustworthy creator's actual account! The only way to know what they actually do is to peek into the code, and idk about you, but I don't know Python. So even after this issue is resolved, you really should only download files from the creators themselves.
But what about CC shopping?
Here's how I like to approach it: I stick to lookbooks and combing through the Patreons/accounts of creators who make items I like. If I see a Sim dump with CC that I'm interested, I try to reach out to the poster and ask where they got specific CC. If I can't do that, I see if it was shared via Drive, look at the individual files themselves, then head to the original CC creator's official download page and get it from the source.
That's all I have for you! Stay safe, and happy Simming! 🫶🏾
