Forum Discussion

luthienrising's avatar
luthienrising
Hero+
2 years ago

Malicous Script Mods and Malware

January 2024 Incident Beginning as early as mid-January 2024, we began seeing Sims 4 script mods with malicious executable .exe code hidden in them.    The mods masqueraded as being from e...
luthienrising's avatar
luthienrising
Hero+
12 months ago

Feb. 11

UPDATED

  • TwistedMexi – ModGuard – v1.2, Patreon (not yet available on Curseforge), ts4script file dated 11 Feb. 2024 – Mac compatibility, additional virus vectors and other improvements – reminder: follow the installation instructions
  • ADDED NOTE:With 1.2, an "inconclusive" report is a false positive and not an indication of a compromised file
luthienrising's avatar
luthienrising
Hero+
12 months ago

Feb. 12

Updated

  • TwistedMexi – ModGuard – v1.3, Patreon (not yet available on Curseforge), ts4script file dated 12 Feb. 2024 – "inconclusive" fixed
  • luthienrising's avatar
    luthienrising
    Hero+
    12 months ago

    Feb. 12

    Updated

    • TwistedMexi – ModGuard – v1.4, Patreon (not yet available on Curseforge), ts4script file dated 12 Feb. 2024 – for fewer false positives
    • luthienrising's avatar
      luthienrising
      Hero+
      12 months ago

      Feb. 28

      Updated

      • TwistedMexi – ModGuard – v1.5, Patreon (not yet available on Curseforge), ts4script file dated 28 Feb. 2024 – for better patch compatibility
      • luthienrising's avatar
        luthienrising
        Hero+
        10 months ago

        Apr. 7: NEW THREAT

        NEW: Malware via a mod that is downloaded as only a text file that contains a link.

        Known cases:

        • "S4 CAS Tools" on Nexus from user fubruss (the real mod is on Mod the Sims, from the late CmarNYC, dated 18 March 2023)
        • “Loading Screen Randomizer” on Nexus from user fubruss (the real mod is on Mod the Sims, from Tesuto , dated 9 January 2024)

        Do NOT follow the links in the text files. Do NOT download other files or follow links from this user. No legitimate mod download will EVER consist of only a text file (a file ending in .txt).

        If you downloaded either of these, delete them NOW and run a virus scan. NOTE: This malware does NOT require that you run the game for it to install itself, and is not what ModGuard is designed to detect and stop.

About The Sims 4 Mods & Custom Content

Find expert tips, troubleshooting help, tutorials for mods and custom content, and The Sims 4 patch files in our forum.14,414 PostsLatest Activity: 2 years ago