Critical Security Alert for Cities: Skylines II Players: Malicious Mod Update Detected

Cities: Skylines II has hit a snag. An alarming “Traffic” mod update has raised red flags among players and developers. Late Monday evening, an external actor exploited the mod, pushing a potentially harmful .dll file that could compromise users’ systems. If you’ve been engaged in Skylines II recently, you’ll want to pay close attention to this.

Fortunately, the developers have acted swiftly. As of October 31, 2024, at 15:35 CET, the compromised version of the Traffic mod has been removed, and a safe version is now available for download. However, if you synced your mod and played the game between the time of the malicious update and now, you might still be at risk. Here’s what you need to do to ensure your safety:

Immediate Steps for Players

• If you have not played with the Traffic mod and have not subscribed to or downloaded it, your system is not at risk. You can continue gaming without worry.
• If you have the Traffic mod but haven’t played Cities: Skylines II since the update, let the mod sync normally. The malicious file should be deleted automatically, but running a scan with an anti-malware program like Windows Defender is wise.
• Check your local files for malicious content if you have played using the affected version. Look in the following directory: %localappdata%lowColossal OrderCities Skylines II.cacheModsmods_subscribed Inside the folder 80095_13.
• Only the 80095_13 folder contains the malicious files; if it’s not present, you’re in the clear.
• If you find this folder, use an antivirus or antimalware program to quarantine or remove it from your system, followed by a thorough scan of your drives.
• As a precaution, changing your passwords is highly recommended.

Developer Response and Future Precautions

The team at Colossal Order is committed to ensuring the safety and enjoyment of their players. They are currently undertaking several measures to prevent future incidents:

• All files uploaded to Paradox Mods will be reviewed to check for any other unexpected updates.
• The modder of the compromised Traffic mod has been contacted and advised on securing their account. They have already released a safe version (v.0.2.4) for players.
• Paradox Mods will implement an update to notify modders when their mods are altered without their consent, ensuring quick alerts for any unauthorized changes.

Sharing creative game content is the lifeblood of the Paradox community, and the developers are dedicated to maintaining a secure environment for all mod enthusiasts. Remember, never share your account details or passwords with anyone; the developers will never ask for your personal information directly.

For more detailed information, you can read the original post here.