Nexus Mods Site Breach

Post » Fri Dec 11, 2015 1:53 am

They're saying some of the mods for Fallout 4 were altered and a .dll file inserted into a few of them a few days ago, but from what I'm seeing it could well be some dodgy malware in their site ads.

Anyway, check for the dsound.dll file if you downloaded any mod from Nexus recently, and if you're affected best to secure your accounts if you re-use passwords (advice: don't ever re-use passwords and don't use emails for throwaway sign up sites for your serious/financial affairs as well). Also if on firefox use NoScript to block unwanted javascript.

http://www.nexusmods.com/fallout4/news/12670/?page=6&sort=DESC&pid=0&thread_id=3508890&pUp=1.

User avatar
Nancy RIP
 
Posts: 3519
Joined: Mon Jan 29, 2007 5:42 am

Post » Fri Dec 11, 2015 12:13 pm

I decided to just play vanilla until the official mod kit is released by Bethesda, though I have some mods there flagged. I just don't like having to edit .ini files to get a mod to work (believe me if someone could screw that up, it would be me).

I read the Nexus note this morning though. Could be pretty bad as there are a lot of files moving on that site.

User avatar
Tiffany Carter
 
Posts: 3454
Joined: Wed Jul 19, 2006 4:05 am

Post » Thu Dec 10, 2015 10:17 pm

Everyone already know about this, or is nobody worried at all :wavey:

User avatar
Jonny
 
Posts: 3508
Joined: Wed Jul 18, 2007 9:04 am

Post » Thu Dec 10, 2015 9:14 pm

I'm not worried. I haven't used any mods yet. I am disappointed though because now I don't think I'm going to risk getting any.

User avatar
Saul C
 
Posts: 3405
Joined: Wed Oct 17, 2007 12:41 pm

Post » Fri Dec 11, 2015 11:34 am

I suspect it's their adverts rather than real breaches into files, because others reported they downloaded exact same files from the affected days with no issues (while using NoScript which will block the dodgy ads from executing).

User avatar
des lynam
 
Posts: 3444
Joined: Thu Jul 19, 2007 4:07 pm

Post » Thu Dec 10, 2015 10:08 pm

Wait so even if a file says "virus scan completed and verified safe" and you download it through NMM it can still have this malicious thing?

User avatar
Julie Ann
 
Posts: 3383
Joined: Thu Aug 23, 2007 5:17 am

Post » Fri Dec 11, 2015 11:40 am

Damn strange people have nothing to do other than ruin people site.

User avatar
celebrity
 
Posts: 3522
Joined: Mon Jul 02, 2007 12:53 pm

Post » Thu Dec 10, 2015 10:31 pm

Interestingly the issue happened after they hit a landmark membership number (though I still suspect it's dodgy ads to blame).

Remember email account info is worth money to unscrupulous sellers, even better if you can access a person's full ID info (birthdate like that site asks people to provide) or bank/paypal account name or email/password as well.

User avatar
Caroline flitcroft
 
Posts: 3412
Joined: Sat Nov 25, 2006 7:05 am

Post » Fri Dec 11, 2015 3:57 am

Dammit the virus scan doesnt detect .dll implants.

*sigh* Gotta go through all the mod files and if I see even one .dll it's #changepasswords time.

User avatar
Charlotte X
 
Posts: 3318
Joined: Thu Dec 07, 2006 2:53 am

Post » Fri Dec 11, 2015 3:53 am

Ty for the heads up ;)

User avatar
Naomi Ward
 
Posts: 3450
Joined: Fri Jul 14, 2006 8:37 pm

Post » Fri Dec 11, 2015 7:08 am

np :) Hope nobody is affected. I have to wonder if everyone already knew or not, would have expected a few more worried people!

User avatar
Adrian Morales
 
Posts: 3474
Joined: Fri Aug 10, 2007 3:19 am

Post » Fri Dec 11, 2015 9:18 am

http://www.nexusmods.com/games/news/12675/? is an update, there was no recent breach.

User avatar
Reven Lord
 
Posts: 3452
Joined: Mon May 21, 2007 9:56 pm

Post » Fri Dec 11, 2015 5:05 am

Good then. I still wonder if it was their adverts rather than cracked accounts though.

User avatar
Charleigh Anderson
 
Posts: 3398
Joined: Fri Feb 02, 2007 5:17 am


Return to Fallout 4