Right now, legitimate modders are undergoing a “massive education campaign” to raise the Cities: Skylines‘ communities awareness of what’s going on, in the hopes that they can reduce the chance of any future harm befalling their community. Though both of Chaos’ accounts have been banned by Valve, there’s a concern that he will return to spread more malware – especially because a loophole in the Steam workshop rules would allow him to continue working on his mods from another account even if the existing accounts remain banned. “What’s been implemented would let him cryptolock a bunch of machines, create a botnet (and DDoS his enemies?) or mine cryptocurrency,” added our source. However, by this point there were around 35,000 downloads for Chaos’ mods – and it’s likely that the real number is even higher. The original account – Chaos – was previously banned for doxxing other members of the community. Valve has removed several of the mods that feed into the automatic updater, and banned the latest account of the modder, which went by the name Holy Water. If someone on this list was detected, the code blocked the user from investigating the mod’s code and would also cripple the users performance. Separate malicious code also checked users’ SteamID against a list that included the accounts of modders, community members and even employees of Colossal Order, the game’s developer. If users run the game as administrator for any reason, this could expose them to keyloggers, viruses, bitcoin mining software – literally anything.” It’s a direct link from Chaos’ brain to users’ computers. There is no validation by Steam, GitHub, or any third party. “Chaos can then remotely deploy any code he chooses to users simply by releasing updated code on his GitHub.
Suddenly you have tens of thousands of users who have effectively installed a trojan on their computer.”Ĭities: Skylines. Users install Harmony (redesigned) with the bundled with it. Those versions gain traction and users, and people come across them instead of the originals… and see Harmony (redesigned) marked as a dependency. The solution provided is to use his versions. “Users install Harmony (redesigned) for a particular reason, suddenly they get errors in popular mods.
0 kommentar(er)
