Project Zomboid Bans Malicious Steam Workshop Mods

Project Zomboid developer The Indie Stone has removed 14 mods and banned their creators after receiving reports from multiple users that they contained “malware.”

“We immediately investigated the mod in question, which contained heavily obfuscated code, and determined that it was creating malicious files outside of the Project Zomboid directory,” the team explained in a Steam blog post. “These mods have been installed on between 50 and 2,200 devices.

relevant

Project Zomboid's hardest challenge is an absolute nightmare

The CDDA challenge is a really, really bad time.

“At this time, the full extent and behavior of the malicious file is not fully known,” the statement continued. “However, because these mods can create files outside of the game directory, we recommend that anyone who downloads them takes appropriate security measures to ensure their system is secure. Simply removing the mod is not enough.”

The mod in question is not affiliated with True Moozic or its creator, but was an add-on to True Moozic.

All “rogue” Project Zomboid mods removed from Steam Workshop

As FRVR reported, the malware was only executed when Project Zomboid was run from the Build 42 update branch, after which the team “updated older unstable branches to match the unstable branches to maintain accessibility to known vulnerabilities.”

To prevent this from happening again, “outdatedunstable” will delay one content update ahead of future unstable content updates.

“The security update released today for Build 41 addresses a separate vulnerability identified during our internal audit. At this time, we have not discovered any evidence that this separate vulnerability has been exploited.”

Listed below are all malicious mods that have been removed from the Steam Workshop.

Risk of Rain 2 OST (True MoooZIC) Workshop ID: 3681934105 – Mod ID: RiskOfRain2Music
Risk of Rain 1 OST (True MoooZIC) Workshop ID: 3681810963 – Mod ID: RiskOfRain1Music
NieR: Automata OST (True MoooZIC) Workshop ID: 3681765529 – Mod ID: NierAutomataMusic
-Katana ZERO OST(True MoooZIC) Workshop ID: 3681764942 – Mod ID: KatanaZeroMusic
Persona 5 OST (True MoooZIC) Workshop ID: 3681756112 – Mod ID: Persona5Music
Jujutsu Kaisen S1 OST (True MoooZIC) Workshop ID: 3681755051 – Mod ID: JujutsuKaisenMusic
Hotline Miami 2: Wrong Number OST (True MoooZIC) Workshop ID: 3681719339 – Mod ID: HotlineMiami2Music
Hotline Miami OST (True MoooZIC) Workshop ID: 3681718339 – Mod ID: HotlineMiami1Music
Silent Hill OST (True MoooZIC) Workshop ID: 3681477980 – Mod ID: SilentHillMusic
Cowboy Bebop OST (True MoooZIC) Workshop ID: 3681476976 – Mod ID: CowboyBebopMusic
Metal Gear Rising: Revengeance Vocal Tracks (True MoooZIC) Workshop ID: 3681339955 – Mod ID: MGRRevengeanceMusic
Classic Roblox Music (True MoooZIC) Workshop ID: 3681335952 – Mod ID: RobloxClassicMusic
DELTARUNE Ch3+4 Music (True MoooZIC) Workshop ID: 3681334251 – Mod ID: DeltaruneCh34Music
Minecraft Alpha+Beta OST (True MoooZIC) Workshop ID: 3680972796 – Mod ID: MinecraftClassicMusic