GTA 5 mods found to include malicious software

Delete affected mods and change your passwords

An eagle eyed Grand Theft Auto 5 player has reported finding malware on the Angry Planes mod. Upon further inspection it was found the No Clip also contains the same malware file.

Aboutseven, a self proclaimed paranoid GTA 5 player, ran a routine processes check on his computer to see what was running in the background of his computer (finally, I'm not alone in this!). He happened to find Windows C# running in the background, which was out of the ordinary because there was absolutely no reason for it to be running. Looking further into the abnormality, Aboutseven discovered that it all lead back to a file named Fade.exe and this file was transferring data over the internet.

What information was being targeted? The kind that makes you delete everything and change your passwords:

  • Facebook spam/credential stealing module
  • Twitch spam/credential stealing module
  • Messenger.com spam/credential stealing module
  • A Steam spamming module
  • A Steam module that evaluates the items in your inventory and their value based on current market value
  • A Keylogger module that logs individual button presses in an XML like format, it also includes information about context switches (switching from one app/window to another)
  • A UDP flooding module

GTAForums members are doing everything they can to find the person spreading the malicious software and figure out what mods are affected. Keep at it folks!

Here are the instructions on virus removal!!

[Thanks for the heads up. Reddit]