Paradox Interactive, the publisher of Cities: Skylines 2, has released an urgent advisory to players following the discovery of malware embedded in a popular mod for the city-building game. The “Traffic” mod, widely used by fans to improve in-game traffic management, was found to contain a malicious file after a recent update. Paradox confirmed that an unauthorized party inserted malware into the mod on October 28, urging players who downloaded and used it between October 28 and October 31 to take immediate steps to secure their systems.
Cities: Skylines has cultivated a robust modding community over the years, with Paradox Interactive and developer Colossal Order actively supporting fan-made modifications for both the original Cities: Skylines and its sequel, Cities: Skylines 2, which launched in 2023. Mods have become an essential part of the gaming experience, allowing players to bypass various in-game limits and introduce new functionalities—enhancements particularly welcomed in the latest sequel, where performance issues have persisted since launch. The Traffic mod, in particular, is among the most popular, granting players greater control over the game’s complex transit and infrastructure systems. However, this incident has highlighted the potential risks of third-party modifications.
Paradox Warns Players of Malware in Popular Mod, Issues Steps for Safe Removal
In an official statement on its website, Paradox confirmed the security breach, describing it as a “potential security issue” resulting from a suspicious file added to the mod’s files. The publisher stated that an “outside actor” introduced a .dll file to the Traffic mod, which is believed to contain malicious code. On October 31, Paradox released an updated and secure version of the mod, reassuring players that the current download is safe to use. However, the studio has strongly advised players who used the mod during the affected dates to scan their systems for potential malware.
For those who may have been impacted, Paradox recommends verifying their game files in a specific directory to identify signs of infection. If this folder is present, Paradox advises players to promptly use antivirus software to quarantine or remove any malicious files within it. Players who do not see this folder likely remain unaffected by the malware.
To safeguard its player base, Paradox has initiated a comprehensive review of all mods currently available for Cities: Skylines 2, ensuring that no other mods have been similarly compromised. The company also noted that it has worked directly with the original creator of the Traffic mod, advising on additional steps to secure their account against unauthorized access.
Paradox Addresses Malware Incident Amid Ongoing Challenges, Reaffirms Commitment to Cities: Skylines 2 Community
The issue with the mod follows a series of setbacks for Cities: Skylines 2 since its release. The game initially launched to a mixed reception, with players and critics pointing out technical issues and bugs that impacted the gaming experience. The negative reception led Paradox to announce an indefinite delay in the console release of Cities: Skylines 2, which was initially slated for launch alongside the PC version. In recent months, the publisher has faced additional delays and cancellations of other anticipated titles, including the indefinite delay of Prison Architect 2 and the surprising cancellation of Life by You, a planned competitor to The Sims.
Despite these challenges, Paradox remains committed to supporting Cities: Skylines 2 and its modding community, affirming that it will implement more rigorous security protocols for mods to ensure a safe user experience. The publisher’s swift response to the malware incident underscores its commitment to the player community and highlights the delicate balance between fostering creative freedom in modding and maintaining a secure gaming environment.
As of now, the updated version of the Traffic mod is confirmed to be safe for players, and Paradox continues to work closely with both Colossal Order and the modding community to prevent similar issues in the future. However, players are advised to remain vigilant, check their files, and run security scans if they downloaded the mod within the affected timeframe.
