poppiiesims - Tumblr blog

[poppiiesims]

BE SAFE OUT THERE FRIENDS

I went on a CC shop today and only downloaded items that were straight from a creators Patreon.

I have no idea why we're being attacked like this, but we have to be safe.

⚠️ ADVISORY: Malicious Mods, Identity Theft, Malware, and You ⚠️

(2/11/2024 update - this was written on Feb 8, 2024, and new information has come out since then. Will write a follow-up post as soon as I can! Been busy with work and life stuff, sorry!) New TL;DR: download @twistedmexi's ModGuard [link and explanation here], and continue to stick to trusted download sources.

(2/16/2024 update - new post with current information: uloelu on Tumblr: ⚠️ 2/16/2024 - Mod Malware update, and a personal thank you ⚠️)

Hey, all! Not sure how many people will see this, but if you do, please reblog. This is a 'little' post regarding a potentially big problem affecting the Sims 4 community. If you download mods/CC at all (and yes I know CC is a type of mod), this applies to you.

TL;DR: For the sake of your personal info, identity, bank account, et cetera, please STOP downloading any mods/CC for the time being. Especially from the following sites: CurseForge, ModTheSims, The Sims Resource. It doesn't matter if you know the creator or not. Give it at least a week while we all figure out what's going on. If you must, I would recommend only downloading directly from a creator's Patreon (assuming they have one).

Other people have written at length about the mods in question, so I'll just share their posts below.

What's going on?

From the Sims 4 After Dark Discord server (a server you should join if you're not in it already):

⚠️If you downloaded any mod listed in the above post and played the game with them installed, this is the cleaner program Kuttoe (creator of the Home Regions and Townie Demographics mods) mentioned in their post: GitHub - overwolf/sims4-social-events-cleaner: Source files and exe release for a tool to clean up your machine if you have downloaded the "Social Events - Unlimited Time" Sims 4 mod ⚠️

Got confirmation from Kuttoe that as long as you didn't boot up the game with the malicious mods installed (or deleted them completely from your computer before playing the game), you *should* be fine. Still, I recommend that anyone who thinks they might have downloaded any of them run the cleaner program.

Here's an explanation from @anadius2 (reposted by Kuttoe) in the Sims 4 After Dark server (not providing a link to prevent brigading or spam, but you can DM me and I'll give you the link) about what the malware will do to your computer:

And a little dive into the back-end coding stuff for the more tech-savvy Simmers out there:

So, to recap:

Fake mods were uploaded to Curseforge, ModTheSims, and The Sims Resource

@msqsimsofficial had their account compromised on 2 of those sites (they are a victim of hacking, so do not send them hate!)

If downloaded, these malicious mods have the ability to steal very sensitive info (your passwords, credit card info if saved somewhere in your browser, data)

As of right now, antivirus software may not be able to detect the malware

Mac and Linux users seem to be safe; Windows users are the ones that could be affected

Why is this happening?

Unsure. Lots of theories are being made by people far more knowledgeable than me, but from the looks of things, could be crypto bullshit and/or an attempt to steal your data and sell it. This is very, very serious, and could wreck your life if said data/personal info falls into the wrong hands.

Identity Theft: What It Is, How to Prevent It, Warning Signs and Tips - NerdWallet

It's always a good idea to change passwords every couple of months or so, but if you think you've been affected, you also need to change your passwords for things like online banking, email and social media accounts, healthcare sites AFTER running the cleaner.

What now?

I want to talk about how we approach modding our games and downloading files in general.

Please STOP downloading mod file folders from people who did not create the specific mods. Period. This includes Sim dumps, building/lots with CC, mod folders promoted on YouTube, etc. This does not mean that anyone sharing them is doing so maliciously. In fact, I appreciate the amount of effort people put into compiling these resources! But unless you're super careful (and super knowledgeable), you run the risk of downloading malware like this on your computer. Make no mistake, the malicious files in question look like run-of-the-mill, everyday mods. Two of them were even posted from a trustworthy creator's actual account! The only way to know what they actually do is to peek into the code, and idk about you, but I don't know Python. So even after this issue is resolved, you really should only download files from the creators themselves.

But what about CC shopping?

Here's how I like to approach it: I stick to lookbooks and combing through the Patreons/accounts of creators who make items I like. If I see a Sim dump with CC that I'm interested, I try to reach out to the poster and ask where they got specific CC. If I can't do that, I see if it was shared via Drive, look at the individual files themselves, then head to the original CC creator's official download page and get it from the source.

That's all I have for you! Stay safe, and happy Simming! 🫶🏾

[poppiiesims]

I made a mistake

I may or may not have decided to restart my not so berry challenge after deleting my save file, and all my custom content I have.

I'm so ridiculously indecisive, it's bad.

[poppiiesims]

no cause as a new simblr I needed this reminder so bad. i don't have the money to pay for photoshop programs and it made me feel so sad that my screenshots look so potato quality thank you

Gently reminder for simmers 💚

You are a legitimate part of simming community no matter which part of the franchise you play, what exactly and how often you post

Your sims are unique and beautiful

Your stories are special and valid

Your gameplay is yours and it’s great the way you do it

I hope you are having a lovely day/night. You are welcome, needed, appreciated and treasured here. Don’t forget.

[poppiiesims]

WARNING: Malicious Sims 4 Script Mods

A third case of the same malicious script mod has been found in "Cheat Menu" mods cleared by MSQSims but "updated" after Feb. 5, 2024, on her own The Sims Resource page. Do not download any MSQSims mods until this is resolved — other mods may also have been reupdated with malicious files. Please see "What to Do" below for steps to take.

FALLOUT: Updated and cleared mod news will be delayed.

When it returns in full, it will likely require new information.

BACKGROUND

Beginning in mid January 2024, someone began uploading versions of Sims 4 script mods including hidden malicious .exe code. These files appear to be from known or new creators and have been found on three different sites. In one case, a modder's own site was used. All MUST be deleted and a virus scan run.

(Mac users: The .exe included in the malicious mod will not run on a Mac, but you may get an LE.)

Known Cases

Someone claiming to be PimpMySims4 uploaded a mod claiming to be an updated Cult Mod to Mod the Sims.

"Social Events - Unlimited Time" by "MySims4" from Curseforge

MSQSims Cheat Menu mods on her own account at TheSimsResource

What to Do

Delete these files: Social Events.package and Social Events.ts4script.

Delete all recent MSQSims files

Run a virus scan, and see the Curseforge Github fix.

What's Changing

Curseforge will be adding new prevention measures for testing file submissions on their site.

Updated and cleared mod news is delayed. When it returns in full (at least at AHQ), it will likely have new features.

[poppiiesims]

"this town was a mess before me and it will be a mess after me fucking try me bitches"

Hate it when the Stardew Valley NPCs get mad at me for digging in their garbage. Like bitch I carry this town on my back. "Ew! Thats awful!" You know what else would be awful? The decaying shambles this town will be left in when I leave because you were all mean to me. Without me Pelican Town is nothing do not fucking test me

[poppiiesims]

I'm so indecisive when it comes to how I want my game to look and everything, to how I want my blog to look, and I know I'll never be a big account but I wish I could be