Re: Malicous Script Mods and Malware

February 9 updates

New Compromised Files

The Sims Resource, which will now be implementing new test measures, has checked all ts4script files uploaded in 2024 and identified three more compromised mods from hacked accounts:

• MSQSims – Mood Cheat Menu – downloaded Feb. 5-8
• MSQSims – Motherlode Menu – downloaded Feb. 5-8
• PlayersWonderland – Mouth Preset N16 – ts4script file

Also identified:

• V1 of an adult mod, with a January file date – uploaded at LoversLab
  
  

---

New Important Notes

• ts4script files: Most Sims 4 mods are not script mods and aren’t doing anything requiring a ts4script file. Those are needed by mods that affect gameplay. If you’re downloading CC, look for ts4script files. Do not put them in your Mods folder. Report the CC that included it.
• downloaded folders: Assume that any folder containing a collection of mods might include a compromised mod containing code that can steal your passwords, your banking info, and much more. Do NOT download and install these collections. If you have done so at any time since mid-January, check your system.

---

New Tool

• TwistedMexi – ModGuard: Mod Malware Protection – download sources: Patreon (now), Curseforge (soon); NOTE: This tool has specific installation instructions. Follow them.
  • CURRENT VERSION: 1.5 - ts4script file date: 28 Feb. 2024, on Patreon, linked from TwistedMexi's website; not yet updated on Curseforge

This tool goes in your Mods folder and will do the following:

• Detect and block common virus vectors  
• Find the mod doing it
• Notify you of the compromised mod
• Notify TwistedMexi’s team of the compromised mod

TwistedMexi’s team can then inform others, and we can get the word out to everyone.

NOTE: Every tool like this has workarounds that a bad actor will find. This tool is NOT a replacement for using caution and skepticism when you download mods. It also does NOT provide broader protection; it is specific to Sims 4 mods.

[updated Feb. 28 for ModGuard v1.5]