Malicious mods: the Sims 4 infostealer threatens gamers’ security

A malicious infostealer was distributed through The Sims 4 mod ecosystem by uploading infected .ts4script files via newly created impersonator accounts and hijacked modder pages; the payload harvests browser data (passwords, cards, cookies), system and hardware identifiers, Discord/Steam credentials and crypto wallets, then exfiltrates the compiled information to an attacker server. Major mod platforms removed infected files after reports and community tools were released for detection and cleanup; users are advised to change passwords and validate sensitive information following infection.