Angry Planes and No Clip include Malware!
1 dekada temu dodane przez Administrator
A few hours ago, it turned out that "No Clip" and “Angry Planes” were not just GTA V modifications but also malware! The malicious part of the software was very well hidden, so it was not found until today. (More information @ GTAForums)
These mods were not only published on GTAinside but also on numerous other GTA sites and worldwide known portals (PCgamer, IGN etc.). Such a sneaky attack did not happen in the last 14 years since GTAinside has launched! Of course, we have removed these two modifications immediately from our mod database!
The malicious software is running as "The Fade.exe" and it is a keylogger to be more precise. To remove it, uninstall both GTA V add-ons and start your anti-virus software. For more information, please follow the instructions in the following thread on GTAForums.com: Possibility of Trojan downloaders / spyware installed via GTA V mod ?.
Important: You also have to change all your passwords!
In the future, the uploaded mods will be proofed even more extensively before activation. If you’re still unsettled, we also recommend you to install only *.lua and * .cs script mods, because these formats are OpenSource and malicious software can be detected easily. Modifications which are installed with OpenIV are also 100% safe!
Links:
- GTAForums.com
Komentarze
Liczba dodanych komentarzy: 35.
05/17/2015 08:04
No, if it's from a rival company then they would face lawsuits. My possible guess that it's from a terrorist/hacker division/organization who try to spread their threats widely into the world.
Mr. Raspberry Jam wrote:
maybe the author of this mod is from a rival company who trying to ruin the gta?
No, if it's from a rival company then they would face lawsuits. My possible guess that it's from a terrorist/hacker division/organization who try to spread their threats widely into the world.
05/17/2015 05:16
maybe the author of this mod is from a rival company who trying to ruin the gta?
maybe the author of this mod is from a rival company who trying to ruin the gta?
05/16/2015 02:57
@rizqan7:
Clearly it's for money (and lulz). By using keylogger, they can gather data such as credit card information, login information (email and passwords), private documents (doxx), and other valuable info from recorded keystrokes which they can sell for $$$, Bitcoin, or other crypto-currency. Basically, it's a profitable form of trolling.
@rizqan7:
Clearly it's for money (and lulz). By using keylogger, they can gather data such as credit card information, login information (email and passwords), private documents (doxx), and other valuable info from recorded keystrokes which they can sell for $$$, Bitcoin, or other crypto-currency. Basically, it's a profitable form of trolling.
05/15/2015 15:12
Ich habe diese beiden Mods benutzt
Ohne Internetverbindung, bringt das was?
Ich habe diese beiden Mods benutzt
Ohne Internetverbindung, bringt das was?
05/15/2015 12:34
Wow, I don't think so... in that case, this situation could turn into a extreme discussion with R*, and finish with a scandal in a lot of forums and news.
Well... we probably can't discover the people who made this, but also it's lame. If another modder try to make the prank again, a lot of people is going to be REALLY piss off.
FeisalAR wrote:
Could this be one of Rockstar's evil anti-modding scheme? It seems that Rockstar is trying to stop V's modding progress in its early stage.
Is it possible that the malware scare is used to spread paranoia among the mod user base, and ultimately diminishing the user base completely?
A rumor stated that Rockstar gained small cut of profit from increased anti-virus sales.
Oooh the conspiracy.
Wow, I don't think so... in that case, this situation could turn into a extreme discussion with R*, and finish with a scandal in a lot of forums and news.
Well... we probably can't discover the people who made this, but also it's lame. If another modder try to make the prank again, a lot of people is going to be REALLY piss off.
05/15/2015 11:42
When I download those files, 3 of 6 antivirus in my laptop sign an alert for malware in the file that's why the download always stop at 99% with IDM or basic browser downloader, those 2 files are suspicious from their release, because that I said something, that I will download GTA V mods later, other mods are fine though, never receive any malware on this site anyway except for the noclip and angry planes mod
When I download those files, 3 of 6 antivirus in my laptop sign an alert for malware in the file that's why the download always stop at 99% with IDM or basic browser downloader, those 2 files are suspicious from their release, because that I said something, that I will download GTA V mods later, other mods are fine though, never receive any malware on this site anyway except for the noclip and angry planes mod
05/15/2015 09:07
@FeisalAR: Rockstar no longer prevent modding in GTA V Singleplayer, it's the user itself that include the malware in its files.
@FeisalAR: Rockstar no longer prevent modding in GTA V Singleplayer, it's the user itself that include the malware in its files.
05/15/2015 08:44
Could this be one of Rockstar's evil anti-modding scheme? It seems that Rockstar is trying to stop V's modding progress in its early stage.
Is it possible that the malware scare is used to spread paranoia among the mod user base, and ultimately diminishing the user base completely?
A rumor stated that Rockstar gained small cut of profit from increased anti-virus sales.
Oooh the conspiracy.
Could this be one of Rockstar's evil anti-modding scheme? It seems that Rockstar is trying to stop V's modding progress in its early stage.
Is it possible that the malware scare is used to spread paranoia among the mod user base, and ultimately diminishing the user base completely?
A rumor stated that Rockstar gained small cut of profit from increased anti-virus sales.
Oooh the conspiracy.
05/15/2015 00:14
Megalow: LOL, possibly not afterlife. The modder would get banned in any GTA Community, might get banned by Rockstar in GTA Online and possibly get arrested in the real world. Remember, spreading such kind of virus is also considered as a crime.
Megalow wrote:
people who do all this should be at least expelled from the page, and if possible; locate and send them to the afterlife (kill)
Megalow: LOL, possibly not afterlife. The modder would get banned in any GTA Community, might get banned by Rockstar in GTA Online and possibly get arrested in the real world. Remember, spreading such kind of virus is also considered as a crime.
05/15/2015 00:08
I don't believe this too. The second time happens again that a mod has virus! (After 2007 mod GTA Hood Life for GTA San Andreas)
I don't believe this too. The second time happens again that a mod has virus! (After 2007 mod GTA Hood Life for GTA San Andreas)
05/15/2015 00:01
I think they made a permanent IP-BAN for him xD.
This kind of people... don't deserve to be a part in a MOD community. :)
Jonathan6506]Alex, just block the modder for infinite amount of time on this website.
Reason: Sending malware[/quote][quote=Alex wrote:
Of course we already did, Jonathan6506! Those people don't belong to the GTA scene.
I think they made a permanent IP-BAN for him xD.
This kind of people... don't deserve to be a part in a MOD community. :)
05/14/2015 23:40
Alex, just block the modder for infinite amount of time on this website.
Reason: Sending malware
Alex, just block the modder for infinite amount of time on this website.
Reason: Sending malware
05/14/2015 23:23
Pathetic.
As GTA IV/SA use ASI mods too, I'm worrying incase IV/SA will be hit with similar attacks. :|
Pathetic.
As GTA IV/SA use ASI mods too, I'm worrying incase IV/SA will be hit with similar attacks. :|
05/14/2015 23:18
@Siriox:
Natürlich prüfen wir die Mods vor Veröffentlichung. Das bedeutet aber nicht, dass sowas nicht passieren kann. Die beiden betroffenen Mods waren zudem auf nahezu jeder spielebezogenen Webseite. Darunter sowohl die ganz ganz Großen wie Gamestar, Gameswelt, PCgamer, IGN als auch jede einzelne GTA Fanpage oder GTAForums ... und es ist trotzdem bis heute Morgen niemandem aufgefallen. Das hat auch damit zu tun, dass *.asi und *.dll Dateien kompiliert sind und der Quelltext somit unbekannt ist. Bei *.lua und *.cs Skripts ist dies nicht der Fall: Der Quellcode ist OpenSource und somit frei einsehbar.
Im Prinzip kann dies bei wirklich JEDER aus dem Internet heruntergeladener Datei passieren. Es gibt immer ein Restrisiko.
####################################
English:
@Siriox:
Of course we check every single mod before publication. But this does not mean that something like this cannot happen. The two affected mods were also on almost every game-related website. From the big players like GameStar, Gameswelt, PCgamer and IGN to every GTA fan page or big communities like GTAForums ... And nevertheless nobody noticed it. This has to do with the fact that *.asi and *.dll files are compiled and the source code is thus unknown. On the other hand, *.lua and *.cs scripts are open source and the source code is visible.
In principle, this can happen with every file you download from the Internet. There is always a residual risk.
@Siriox:
Natürlich prüfen wir die Mods vor Veröffentlichung. Das bedeutet aber nicht, dass sowas nicht passieren kann. Die beiden betroffenen Mods waren zudem auf nahezu jeder spielebezogenen Webseite. Darunter sowohl die ganz ganz Großen wie Gamestar, Gameswelt, PCgamer, IGN als auch jede einzelne GTA Fanpage oder GTAForums ... und es ist trotzdem bis heute Morgen niemandem aufgefallen. Das hat auch damit zu tun, dass *.asi und *.dll Dateien kompiliert sind und der Quelltext somit unbekannt ist. Bei *.lua und *.cs Skripts ist dies nicht der Fall: Der Quellcode ist OpenSource und somit frei einsehbar.
Im Prinzip kann dies bei wirklich JEDER aus dem Internet heruntergeladener Datei passieren. Es gibt immer ein Restrisiko.
####################################
English:
@Siriox:
Of course we check every single mod before publication. But this does not mean that something like this cannot happen. The two affected mods were also on almost every game-related website. From the big players like GameStar, Gameswelt, PCgamer and IGN to every GTA fan page or big communities like GTAForums ... And nevertheless nobody noticed it. This has to do with the fact that *.asi and *.dll files are compiled and the source code is thus unknown. On the other hand, *.lua and *.cs scripts are open source and the source code is visible.
In principle, this can happen with every file you download from the Internet. There is always a residual risk.
Mein Vertrauen ist angeschlagen.
05/14/2015 20:19
== [ENG] ==
Yes, I already made a video (In spanish, sorry, but my english isn't so good xD.) that explains this problem, with the solution and how people can find it.
Here is the link ^^! (CAUTION, It's spanish.) https://www.youtube.com/watch?v=hoM9I1dwagQ
Greetings!
== [ESP] ==
Si, de hecho acabo de hacer un vídeo que explica todo el problema, con su solución y con la forma de que la gente lo pueda encontrar.
¡Aquí está el link ^^! https://www.youtube.com/watch?v=hoM9I1dwagQ
¡SALUDOS! =)
Alex wrote:
You're completely right, Szthomas: We have to be more carefully, but there is absolutely no reason to flip out.
But anyway, it's a very sad moment for GTA modding.
@Andryvision09:
Right. We have to carry the responsibility to inform those people who have installed this malicious mods.
== [ENG] ==
Yes, I already made a video (In spanish, sorry, but my english isn't so good xD.) that explains this problem, with the solution and how people can find it.
Here is the link ^^! (CAUTION, It's spanish.) https://www.youtube.com/watch?v=hoM9I1dwagQ
Greetings!
== [ESP] ==
Si, de hecho acabo de hacer un vídeo que explica todo el problema, con su solución y con la forma de que la gente lo pueda encontrar.
¡Aquí está el link ^^! https://www.youtube.com/watch?v=hoM9I1dwagQ
¡SALUDOS! =)
05/14/2015 19:57
Not all. But yes, It also can be a risk. A strong one.
IForgotPassword wrote:
So, the .asi mods may be dangerous?
Not all. But yes, It also can be a risk. A strong one.
05/14/2015 18:12
- Texture, Handling and other mods which have to be installed with OpenIV are 100% safe.
- *.lua and *.cs mods are pretty safe because malicious software can not be hidden easily.
- *.asi and *.dll mods are POTENTIALLY dangerous, because malicious software COULD be hidden. I'm sure that 99.9% of ASI and DLL mods are safe but there is a risk.
- Texture, Handling and other mods which have to be installed with OpenIV are 100% safe.
- *.lua and *.cs mods are pretty safe because malicious software can not be hidden easily.
- *.asi and *.dll mods are POTENTIALLY dangerous, because malicious software COULD be hidden. I'm sure that 99.9% of ASI and DLL mods are safe but there is a risk.