Hogwarts Legacy

Hogwarts Legacy

View Stats:
This topic has been locked
cj Feb 11, 2023 @ 8:52pm
PSA: *Do not download* Sirona mod contains keylogger
Hi, I recently analyzed the Sirona Ryan voice mod from multiple modding sites and each PAK files contained the same piece of malware. I had it running on a virtual machine and could see it logging my keystrokes. I'm not terribly proficient in IT, but I can confirm the data was being sent to an unknown source.
< >
Showing 1-15 of 37 comments
duddits_berd Feb 11, 2023 @ 8:54pm 
I mean, it’s karma really
Captain Pansy Feb 11, 2023 @ 8:54pm 
a pak file cannot contain malware.
Karl Pilkington Feb 11, 2023 @ 8:55pm 
Originally posted by duddits_berd:
I mean, it’s karma really
A mod made by a troll turns out to troll those who download it, just makes sense really.
duddits_berd Feb 11, 2023 @ 8:55pm 
Originally posted by Captain Pansy:
a pak file cannot contain malware.

Anything can contain malware, especially compressed files
UnhappyCLOWN Feb 11, 2023 @ 8:55pm 
3
"Not proficient in IT" but found malware that apparently every virus scanner missed. And you don't even own the game on Steam. I smell something from a bovine.
Cupcake Feb 11, 2023 @ 8:55pm 
Would appreciate if you can show screenshots as evidence. I also wants to see how it looks like.
A. H. Feb 11, 2023 @ 8:56pm 
Originally posted by cj:
Hi, I recently analyzed the Sirona Ryan voice mod from multiple modding sites and each PAK files contained the same piece of malware. I had it running on a virtual machine and could see it logging my keystrokes. I'm not terribly proficient in IT, but I can confirm the data was being sent to an unknown source.

You got some screenies or a video on you analyzing the .pak file?
boytype Feb 11, 2023 @ 8:56pm 
The OPs post is just a lie.
Fosnola Feb 11, 2023 @ 8:57pm 
Originally posted by cj:
Hi, I recently analyzed the Sirona Ryan voice mod from multiple modding sites and each PAK files contained the same piece of malware. I had it running on a virtual machine and could see it logging my keystrokes. I'm not terribly proficient in IT, but I can confirm the data was being sent to an unknown source.

source: trust me bro
Cobra Feb 11, 2023 @ 8:58pm 
Originally posted by duddits_berd:
I mean, it’s karma really
Karma because people are modding the game for their own inclusion? Go be a man somewhere else
JDog101 Feb 11, 2023 @ 8:59pm 
JK Rowling is the best author ever born.
Demonsouls1993 Feb 11, 2023 @ 8:59pm 
they downloaded a mod to a game they dont even have troll bait and fail
Caz Feb 11, 2023 @ 8:59pm 
Originally posted by cj:
Hi, I recently analyzed the Sirona Ryan voice mod from multiple modding sites and each PAK files contained the same piece of malware. I had it running on a virtual machine and could see it logging my keystrokes. I'm not terribly proficient in IT, but I can confirm the data was being sent to an unknown source.
You got the keylogger from something else. Get back to writing your hitpiece, kotaku intern.
Captain Pansy Feb 11, 2023 @ 8:59pm 
Originally posted by duddits_berd:
Originally posted by Captain Pansy:
a pak file cannot contain malware.

Anything can contain malware, especially compressed files

in theory yes, but OP is lying.
also, in order for that malware to do something, it has to be executed somehow. and since i doubt this game's exe has functionalities to execute malware files, i will go with my original statement.
only method would be if the game itself would be converted to a malware with it, so that it would capture and sent keystrokes, which is not impossible, but highly unlikely.
even more unlikely that someone "not proficient in IT" would find it.
Last edited by Captain Pansy; Feb 11, 2023 @ 9:03pm
Caz Feb 11, 2023 @ 9:00pm 
Originally posted by Yedolf Westler:
Originally posted by cj:
Hi, I recently analyzed the Sirona Ryan voice mod from multiple modding sites and each PAK files contained the same piece of malware. I had it running on a virtual machine and could see it logging my keystrokes. I'm not terribly proficient in IT, but I can confirm the data was being sent to an unknown source.

You got some screenies or a video on you analyzing the .pak file?
Kotaku interns don't know enough about files to even open one unless it's a word document or txt file
< >
Showing 1-15 of 37 comments
Per page: 1530 50

Date Posted: Feb 11, 2023 @ 8:52pm
Posts: 37