this post was submitted on 10 Nov 2024
57 points (100.0% liked)

Gaming

30545 readers
147 users here now

From video gaming to card games and stuff in between, if it's gaming you can probably discuss it here!

Please Note: Gaming memes are permitted to be posted on Meme Mondays, but will otherwise be removed in an effort to allow other discussions to take place.

See also Gaming's sister community Tabletop Gaming.

This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 2 years ago
MODERATORS
alyaza@beehaw.org
TheRtRevKaiser@beehaw.org
gyrfalcon@beehaw.org
Whom@beehaw.org
The_Hunted_One@beehaw.org
chloyster@beehaw.org
remington@beehaw.org
57
malicious backdoor found in widely used game mod by Low Level [YouTube] (youtu.be)
submitted 3 days ago by thingsiplay@beehaw.org to c/gaming@beehaw.org
18 comments fedilink hide all child comments
 

Invidious, an alternative YouTube client in the browser without using YouTube directly (more private): https://inv.nadeko.net/watch?v=VH_8arwuRz8

Video Description:

This is why I don't download game mods. Another backdoor has been found, this time in a popular modular for City Skylines 2 by paradox games. Checkout what happened in this video.

reddit.com/r/antivirus/comments/1gh4qp0/popular_mod_for_a_game_may_have_been_malicious_no

you are viewing a single comment's thread
view the rest of the comments
[–] Poopfeast420@discuss.tchncs.de 17 points 3 days ago (2 children)

If I understand it correctly from the reddit post, this was a popular mod, that you could get directly in-game, so probably available through the Steam Workshop or something. In that case you assume everything is fine and don't really check out, if there's something wrong.

[–] circuitfarmer@lemmy.sdf.org 14 points 3 days ago (1 children)

It is a CS2 mod -- CS2 lacks Steam Workshop support. Paradox did not put it in, in favor of their own mod platform.

There was a lot of beef about the lack of workshop support, but it means it was on Paradox's platform, if anything.

[–] teawrecks@sopuli.xyz 4 points 3 days ago (1 children)

Wonder if steam workshop scans for this kind of thing, or if it would have otherwise been found quicker.

[–] thingsiplay@beehaw.org 5 points 3 days ago (1 children)

This mod had some clever tricks to avoid detection from Antivir scanner. Not sure how deep and complex the Steam Workshop antivir scanner goes (if any). Hard to say if they would have found and prevented it. However, all antivir and other scanner software learned from this and now every malware using this technique could be detected instantly. At least in theory.

[–] Poopfeast420@discuss.tchncs.de 3 points 3 days ago (1 children)

Steam has some basic scans, but nothing special. This kind of thing happened before, with mods and even games.

[–] thingsiplay@beehaw.org 1 points 3 days ago (1 children)

I would assume so. Did this happen in Steam Workshop?

[–] Poopfeast420@discuss.tchncs.de 3 points 3 days ago (2 children)

Yes. Apparently there were enough mods like this, that someone made a list to unsubscribe from them:

https://steamcommunity.com/sharedfiles/filedetails/?id=2749608338

Also, this time it's the first Cities Skyline, I don't know of any other games, but it wouldn't surprise me.

[–] bekopharm@discuss.tchncs.de 1 points 22 hours ago

Heh, madlads :D Modern problems require modern solutions 👍

[–] FarceOfWill@infosec.pub 1 points 2 days ago

There were rumours about one for rimworld but I'm not sure if it was real or on steam.

[–] Telorand@reddthat.com 7 points 3 days ago

Man if that's the case, that really sucks.