GTA 5 mods Angry Planes and No Clip contain malware

12f53e Angryplanesfinal

It's come to light that the Grand Theft Auto V mod Angry Planes, as well as another one entitled No Clip, contain a keylogger called Fade.exe. The presence of the malware first came to light on GTAForums, and has been confirmed by GTA5-Mods.com.

"The Angry Planes mod was downloaded and run by thousands of people on GTA5-Mods.com and various other community mod hosting sites and forums. It was even featured in Kotaku and PC Gamer!" GTA5-Mods explained. "The mod did exactly what it advertised, however it also spawned a thread that installed malware on your machine behind the scenes. The threat was not picked up by running the .asi file through VirusTotal, which made it difficult to detect before running. This was an extremely sneaky attack, something I can't say I've seen in 12 years of GTA modding."

If you've installed the scripts, ditch them immediately, then check your system for the presence of a file called Fade.exe. According to the GTAforums thread, Malwarebytes can detect and isolate the offending software. You will also want to change your passwords, since the software may have picked them up; at least one forum user reported earlier today that his Steam account has been hijacked.

Links to the mod have been removed by GTA5-Mods.com, and it said it will tighten up its approval process for these kinds of mods in the future. "If you post compiled scripts in .asi, .dll, or .net.dll formats, the approval process will be much lengthier," it wrote. "We recommend avoiding these formats completely and publishing your mods as .lua or .cs source files, these kinds of scripts will be approved very quickly because the source can be verified." It also recommended that players worried about future difficulties avoid tools and script mods, which at the moment are the only types of mods that can actually contain malware.

We at PC Gamer apologize for reporting on the affected mods. We did not detect any malware when testing them, and are updating our previous stories.

Andy Chalk

Andy has been gaming on PCs from the very beginning, starting as a youngster with text adventures and primitive action games on a cassette-based TRS80. From there he graduated to the glory days of Sierra Online adventures and Microprose sims, ran a local BBS, learned how to build PCs, and developed a longstanding love of RPGs, immersive sims, and shooters. He began writing videogame news in 2007 for The Escapist and somehow managed to avoid getting fired until 2014, when he joined the storied ranks of PC Gamer. He covers all aspects of the industry, from new game announcements and patch notes to legal disputes, Twitch beefs, esports, and Henry Cavill. Lots of Henry Cavill.