they found ANOTHER back door (game mods are crazy)
Source: YouTube · Low Level · published Nov 10, 2024 · 15:28
A popular City Skylines mod was compromised with malware that infected over 372,000 users, demonstrating the risks of downloading game mods from untrusted sources 0:36-0:50.
Key Takeaways:
• The malware was hidden in a file called "fastmath.dll" that came with the popular "Traffic" mod on paradoxplaza.com 1:02-1:14
• The malicious DLL had no exported functions, which was an immediate red flag as legitimate DLLs export functions for reuse 3:01-3:07
• The malware used advanced obfuscation techniques including weaving payload bytes into assembly instructions and XOR encoding with hex 33 8:31-8:44
• It employed custom hashing to locate needed system functions without revealing recognizable strings to antivirus software 9:57-10:14
• The ultimate goal was to steal crypto wallets from infected users through DLL sideloading and process injection 14:04-14:10
The incident serves as a warning to be cautious when downloading game mods, as they run code on your system that could potentially be malicious 15:01-15:06.
Sources:
- 0:36-0:50 Explanation of the malware distribution through the Traffic mod
- 1:02-1:14 Information about the paradoxplaza.com mod distribution
- 3:01-3:07 Analysis of the malicious fastmath.dll file
- 8:31-8:44 Details on the malware's obfuscation techniques
- 9:57-10:14 Explanation of the custom hashing technique
- [14:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
they told me I was crazy but this time yet again I was right whenever I play games with my friends they always insist that I download a ton of crazy mods to the game like Go download the anime waifu mod for Minecraft or go download the no pants mod for Skyrim and the reason that I'm always so skeptical of downloading these mods is at the end of the day a mod is just code it's code that you run that makes a modification to the game so it behaves in a different way one of the easiest ways to get hacked is to run code by an author that you don't necessarily know or trust and this exact thing happened to the city skylines Community earlier this week a malicious hacker hacked an account that was being used to submit modifications to the traffic mod in City skylines and as a result everyone that…