Cities Skylines 2 is very popular among modders. Unfortunately, a currently very popular mod can endanger your PC and your data so much that Paradox had to comment on the matter.
fans of Cities Skylines 2 were recently warned by Paradox Interactive. A malicious file has been discovered in one of the game’s most popular mods. Trafficthat helps manage traffic in cities. An external actor managed to break into the mod and include a potentially dangerous file. Paradox responded quickly by removing the compromised version and releasing a secure update. However, the publisher recommends players check their systems to avoid unpleasant surprises.
A risk to players’ crypto wallets with this Cities Skylines 2 mod
The Traffic mod, widely used in Cities Skylines 2, was modified on October 28 by an intruder who inserted a suspicious file. This compromised version of the mod has been removed. But if players downloaded or auto-updated Traffic between October 28th and 31st, they could be exposed. According to initial analysis, the malicious file specifically targets cryptocurrency wallets, particularly those on the Exodus platform.
Although the exact purpose of this file is not yet fully confirmed, Paradox and cybersecurity experts believe that it could steal sensitive information. Everything related to crypto wallets on infected systems. It is therefore still not to be taken lightly.
What to do to protect your computer
To protect their PC, Paradox recommends players to run an antivirus scan and check the directory for suspicious files %AppData%\LocalLow\Colossal Order\Cities Skylines II\.cache\Mods\mods_subscribed\80095_13. If unusual DLL files are detected, it is recommended to delete them.
Paradox also mobilized specialized teams to deepen the investigation. At this point, about 30 out of 72 security vendors recognize the file as malicious. Therefore, it is essential for gamers to update their antivirus software.
To reassure users, Paradox has conducted a thorough review of all mods present on its platform Paradox mods. Good news: No other mods appear to be affected by this malicious file. Paradox has also taken steps to secure the creator’s account Trafficto ensure that no further unauthorized changes can be made.
Source: Paradox Interactive
