Support NeoGAF

[QaaQer]

you don't have to worry about Skyrim mods downloaded from Nexus

All of the mods are perfectly safe there .

So don't let this stop you from Modding Skyrim .

umm https://www.google.ca/search?sourceid=chrome-psyapi2&rlz=1C1CHWA_enCA627CA627&ion=1&espv=2&ie=UTF-8&q=nexus%20virus%20mods&oq=nexus%20virus%20mods&aqs=chrome..69i57j0.4351j0j7

 

[N° 2048]

Was this an infected 'unofficial' version or has the mod always been infected by the originally creator?
Scummy nonetheless but if it's the latter then super fucking scummy since the mod was even showcased on IGN...

 

[TheAdmiester]

Was this an infected 'unofficial' version or has the mod always been infected by the originally creator?
Scummy nonetheless but if it's the latter then super fucking scummy since the mod was showcased on IGN...

The original.

 

[EroticSushi]

Was this an infected 'unofficial' version or has the mod always been infected by the originally creator?
Scummy nonetheless but if it's the latter then super fucking scummy since the mod was even showcased on IGN...

It's the original. It's too deeply integrated to have been done by someone else. It's probably added into the source code.

People have tracked him down though. He's in Denmark and has already stole and sold some items on people's Steam account.

 

[QaaQer]

It's the original. It's too deeply integrated to have been done by someone else. It's probably added into the source code.

People have tracked him down though. He's in Denmark and has already stole and sold some items on people's Steam account.

amateur.

 

[finley83]

This is really shitty. I hope there's some way to trace the uploader.

edit: well, there it is.

[goldblum.gif]

 

[EdibleExplosives]

Glad I never knew about these mods, I hope there are no other mods infected with this shit.

 

[The Janitor]

It's the original. It's too deeply integrated to have been done by someone else. It's probably added into the source code.

People have tracked him down though. He's in Denmark and has already stole and sold some items on people's Steam account.

Interesting. Is there a thread somewhere about that?

 

[Chesskid1]

A friend of mine, who happens to be a GTA livestreamer, had his PayPal and Steam account hacked a week ago. He literally lost $4k from PayPal.

I have also heard that another GTA livestreamer (Noah from YouTube) who had this happen to him; he lost $8k from PayPal and $1k from CS Go. Not a coincidence that both of them were livestreaming 'angry planes' and 'noclip' mods

The malware author has made quite a nice sum from these two people alone.

damn.

lots of victims coming out in the thread as well.

 

[Thorgal]

umm https://www.google.ca/search?sourceid=chrome-psyapi2&rlz=1C1CHWA_enCA627CA627&ion=1&espv=2&ie=UTF-8&q=nexus%20virus%20mods&oq=nexus%20virus%20mods&aqs=chrome..69i57j0.4351j0j7

That was one guy back in 2014 who once he was found out was swiftly dealt with and the files where removed .

i understand one should always use a certain caution downloading anything on the web but i trust mods posted on Nexus ( especially the popular ones ) much more then any other modding site .

 

[Akronis]

It's not only exes. Malware can be in .ASI files as well.

This was the issue. Malware scanners didn't find anything even when they were manually scanned.

 

[M.Steiner]

Thanks for the warning, OP.
I saw a vid of the Angry Planes mod just yesterday but thankfully haven't installed shit. Pretty fucked up :/

 

[OrlanisWorks]

I'm glad I've been away from my computer days at a time. I would've installed these things and have been really screwed.

Thanks for the heads up. Really pisses me off, those virus-giving fucks I'll never know.

 

[Windom Earle]

I haven't started using GTAV mods yet, but this is a big warning sign. Can't be careful enough.

This mod got big exposure on IGN and from Youtubers, we're talking thousands of potential victims here...

 

[Gamesadict]

Wow, it's really worrying that the Angry Planes mod got featured by gaming sites and livestreamers/youtubers. I can only imagine the amount of potential victims.

 

[Zom]

I have the no clip mod installed lol, but I never type my passwords.

 

[N° 2048]

I have the no clip mod installed lol, but I never type my passwords.

It'll still pull information from cookies/open sessions in your browsers.

Not saying you are infected but check just in case by doing a full scan.

 

[Windom Earle]

I have the no clip mod installed lol, but I never type my passwords.

It seems the malware also gets the passwords from existing sessions. (For example if you are logged into Steam, GAF, etc.) so I would be sure to remove that shit and change my passwords.

 

[BobLoblaw]

Thank god I'm waiting to play this after my next upgrade in the next 6 months or so. People fucking suck.

 

[Zom]

gad dam, indeed I was infected xd, gotta change all passwords

 

[Revolutionary]

Wow that's fucked up. Glad I didn't go too crazy with mods just yet.
Edit:
PC Gamer apologizes & updates previous story
http://www.pcgamer.com/gta-5-mods-angry-planes-and-no-clip-contain-malware/
IGN doesn't apologize or update previous story
http://www.ign.com/articles/2015/05...s-angry-planes-and-noclip-infected-with-virus

 

[LilJoka]

Bumping to make sure everyone continues to see this.

 

[Evo X]

Shit. I was about to install the angry planes mod after watching a few funny Youtube vids, but got busy with other stuff.

I only have Scripthook and RiotMode installed right now. Anyone know if those are safe or infected?

Edit: Just checked my registry and looks like I'm safe.

Thank god. I'm gonna give up modding from now on if shit like this is possible. Some dude lost $8K from his PayPal because of this!

 

[jacksepticeye]

Thank God I only used the mayhem mod and the two popular trainers so far. Gonna be super cautious about modding from now on

Then again I run malware bytes like 10 times a day just to be sure

 

[n0razi]

is it really that easy to steal from a paypal account... i mean its so easily tracked, etc

 

[LilJoka]

is it really that easy to steal from a paypal account... i mean its so easily tracked, etc

Only protection against a keylogger is using on screen keyboard.
It will log all key strokes, nothing specific to any program or website in most cases. The attackers then sift through the logs looking for email address and password combinations. So its not instantly hacked.