Malicous Script Mods and Malware
January 2024 Incident
Beginning as early as mid-January 2024, we began seeing Sims 4 script mods with malicious executable .exe code hidden in them.
The mods masqueraded as being from e...
Forum Discussion
NOTE: Updated February 8 to add recovery steps re. Discord and cryptocurrency wallets.
Further important updates will have added notes here so people subscribing to this post are messaged about them.
February 9 updates
New Compromised Files
The Sims Resource, which will now be implementing new test measures, has checked all ts4script files uploaded in 2024 and identified three more compromised mods from hacked accounts:
- MSQSims – Mood Cheat Menu – downloaded Feb. 5-8
- MSQSims – Motherlode Menu – downloaded Feb. 5-8
- PlayersWonderland – Mouth Preset N16 – ts4script file
Also identified:
- V1 of an adult mod, with a January file date – uploaded at LoversLab
New Important Notes
- ts4script files: Most Sims 4 mods are not script mods and aren’t doing anything requiring a ts4script file. Those are needed by mods that affect gameplay. If you’re downloading CC, look for ts4script files. Do not put them in your Mods folder. Report the CC that included it.
- downloaded folders: Assume that any folder containing a collection of mods might include a compromised mod containing code that can steal your passwords, your banking info, and much more. Do NOT download and install these collections. If you have done so at any time since mid-January, check your system.
New Tool
- TwistedMexi – ModGuard: Mod Malware Protection – download sources: Patreon (now), Curseforge (soon); NOTE: This tool has specific installation instructions. Follow them.
- CURRENT VERSION: 1.5 - ts4script file date: 28 Feb. 2024, on Patreon, linked from TwistedMexi's website; not yet updated on Curseforge
This tool goes in your Mods folder and will do the following:
- Detect and block common virus vectors
- Find the mod doing it
- Notify you of the compromised mod
- Notify TwistedMexi’s team of the compromised mod
TwistedMexi’s team can then inform others, and we can get the word out to everyone.
NOTE: Every tool like this has workarounds that a bad actor will find. This tool is NOT a replacement for using caution and skepticism when you download mods. It also does NOT provide broader protection; it is specific to Sims 4 mods.
[updated Feb. 28 for ModGuard v1.5]
