Grand Theft Auto V No Clip And Angry Planes Mods Found To Have Keylogging Malware

A pair of Grand TheftAuto V mods have been found to contain malware rooted inside them. The No Clip and Angry Planes modifications both work as intended on the front end, but some of the thousands of users running the mods have noticed a keylogger program dubbed Fade.exe was running in the background.

Users first noticed something was up over on the GTA V Forums, where a user over there discovered a C# compile running in the background on their PC. Tracing it back to Fade.exe eventually revealed it was a keylogger using the internet access of the host PC. Every keystroke of an infected PC was being recorded and sent back to the creator, potentially revealing crucial passwords, email addresses, and usernames.

The two mods have since been pulled down from the majority of mod hosting sites, but if you’ve downloaded either of these then it’s time to delete them and have a thorough anti-virus scan to detect the files. Some users are reporting their Steam accounts have also been hijacked, so it might be time to change them passwords before you find yourself in trouble.

"The Angry Planes mod was downloaded and run by thousands of people on GTA5-Mods.com and various other community mod hosting sites and forums. It was even featured in Kotaku and PC Gamer!" mod hosting site GTA5-Mods said. "The mod did exactly what it advertised, however it also spawned a thread that installed malware on your machine behind the scenes. The threat was not picked up by running the .asi file through VirusTotal, which made it difficult to detect before running. This was an extremely sneaky attack, something I can't say I've seen in 12 years of GTA modding."

Sigh…. It’s a shame there’s a few people out there intent on doing this, but hopefully these are just isolated cases and the rest of Grand Theft Auto V’s mods are safe. If you’re interested in getting rid of the offending virus manually, you can check out a step-by-step guide here.