Project Zomboid developer The Indie Stone has delisted 14 mods and banned their author after reports from multiple users alleged that they contained “malicious code.”
“We immediately investigated the mod in question, which contained heavily obfuscated code, and confirmed it was creating malicious files outside of the Project Zomboid directory,” the team explained in a Steam blog post. “These mods had been installed on between 50 and 2,200 devices.
Project Zomboid’s Hardest Challenge Is An Absolute Nightmare
The CDDA challenge is a really, really bad time.
“At this time, the full scope and behavior of the malicious files have not been fully determined,” the statement continued. “However, because these mods were capable of creating files outside the game directory, we strongly recommend that anyone who downloaded them take appropriate security measures to ensure their system is safe. Simply uninstalling the mods is not sufficient.”
The mods in question were add-ons for True Moozic, though unaffiliated with True Moozic or its author.
Every “Malicious” Project Zomboid Mod That Was Delisted From The Steam Workshop
As reported by FRVR, the malicious code only ran if Project Zomboid was being played on the Build 42 update branch, and the team has since “Updated the outdatedunstable branch to match the unstable branch to avoid leaving a known vulnerability accessibility.”
To prevent this from happening again, “outdatedunstable” will now lag one content update behind unstable going forward.
“The security updates released for Build 41 today address a separate vulnerability identified during an internal audit. At this time, we have found no evidence that this separate vulnerability has been exploited.”
Listed below are all of the malicious mods which have been removed from the Steam Workshop.
- Risk of Rain 2 OST (True MoooZIC) Workshop ID: 3681934105 – Mod ID: RiskOfRain2Music
- Risk of Rain 1 OST (True MoooZIC) Workshop ID: 3681810963 – Mod ID: RiskOfRain1Music
- NieR: Automata OST (True MoooZIC) Workshop ID: 3681765529 – Mod ID: NierAutomataMusic
- -Katana ZERO OST (True MoooZIC) Workshop ID: 3681764942 – Mod ID: KatanaZeroMusic
- Persona 5 OST (True MoooZIC) Workshop ID: 3681756112 – Mod ID: Persona5Music
- Jujutsu Kaisen S1 OST (True MoooZIC) Workshop ID: 3681755051 – Mod ID: JujutsuKaisenMusic
- Hotline Miami 2: Wrong Number OST (True MoooZIC) Workshop ID: 3681719339 – Mod ID: HotlineMiami2Music
- Hotline Miami OST (True MoooZIC) Workshop ID: 3681718339 – Mod ID: HotlineMiami1Music
- Silent Hill OST (True MoooZIC) Workshop ID: 3681477980 – Mod ID: SilentHillMusic
- Cowboy Bebop OST (True MoooZIC) Workshop ID: 3681476976 – Mod ID: CowboyBebopMusic
- Metal Gear Rising: Revengeance Vocal Tracks (True MoooZIC) Workshop ID: 3681339955 – Mod ID: MGRRevengeanceMusic
- Classic Roblox Music (True MoooZIC) Workshop ID: 3681335952 – Mod ID: RobloxClassicMusic
- DELTARUNE Ch3+4 Music (True MoooZIC) Workshop ID: 3681334251 – Mod ID: DeltaruneCh34Music
- Minecraft Alpha+Beta OST (True MoooZIC) Workshop ID: 3680972796 – Mod ID: MinecraftClassicMusic
- Released
-
November 8, 2013
- ESRB
-
m
- Developer(s)
-
The Indie Stone
- Publisher(s)
-
The Indie Stone
- Engine
-
LWJGL
