Recently, another cybersecurity incident occurred in the Steam Workshop. This time, fans of the popular survival game Project Zomboid became victims.
The developers responded to player complaints about a modification that was creating files outside the game folder. They conducted an investigation and determined that the mod did indeed contain heavily obfuscated code that created malicious files on the PC.
Further investigation revealed that the same "modder" had uploaded a total of 14 mods with the same exploit.
According to the developers' estimates, these modifications were installed on 500 - 2200 devices. The user has already been blocked, and all infected mods have been removed from the Steam Workshop.
List of infected mods:
- Risk of Rain 2 OST (True MoooZIC)
- Risk of Rain 1 OST (True MoooZIC)
- NieR: Automata OST (True MoooZIC)
- Katana ZERO OST (True MoooZIC)
- Persona 5 OST (True MoooZIC)
- Jujutsu Kaisen S1 OST (True MoooZIC)
- Hotline Miami 2: Wrong Number OST (True MoooZIC)
- Hotline Miami OST (True MoooZIC)
- Silent Hill OST (True MoooZIC)
- Cowboy Bebop OST (True MoooZIC)
- Metal Gear Rising: Revengeance Vocal Tracks (True MoooZIC)
- Classic Roblox Music (True MoooZIC)
- DELTARUNE Ch3+4 Music (True MoooZIC)
- Minecraft Alpha+Beta OST (True MoooZIC)