We’ve identified a potential security vulnerability impacting the “Traffic” mod for Cities: Skylines II. On Monday night, an unauthorized individual introduced an update to the mod containing a suspicious .dll file, which we suspect to be malicious. We’ve promptly removed it, and as of 2024-10-31 15:35 CET, the updated version is safe to download and use. However, if your mod was synchronized and you played with it during the affected period, there is a chance the malicious file exists on your system.
We are investigating the specifics of this .dll file and will provide updates as soon as possible. Meanwhile, please take the following precautions to safeguard your system:
- If you haven’t engaged with the Traffic mod in any form—whether subscribing or downloading—your system should remain secure and no action is necessary.
- If you’re subscribed to the Traffic mod but haven’t played Cities: Skylines 2 since Monday, allow the mod to sync normally; this should automatically remove the harmful file. Nevertheless, we highly recommend scanning your system with an anti-malware tool, such as Windows Defender.
- If you used the compromised version, please inspect your local files. Malicious files, if present, can be found here: %AppData%\LocalLow\Colossal Order\Cities Skylines II\.cache\Mods\mods_subscribed\80095_13.
- Bear in mind that the compromised files are only located specifically in the 80095_13 folder. Absence of this folder means your version of the mod is not affected.
- Should you discover this folder, employ an antivirus or antimalware program to quarantine and/or remove it, followed by a comprehensive scan of your drives.
We are implementing the following actions to ensure your safe and secure enjoyment of our mods:
- We will conduct a thorough review of all files uploaded to Paradox Mods to identify any other mods subject to unauthorized updates.
- We have contacted the creator of the compromised mod to discuss how best to secure their account. The Traffic mod has been updated to a secure version, so players using version v.0.2.4 can safely continue.
- Paradox Mods will be updated to notify creators when their mods receive updates, ensuring they’re immediately aware of any unauthorized changes.
Sharing creative game content is a cornerstone of our community at Paradox, and we are committed to facilitating safe exploration of mods.
As an important reminder: never share your account credentials or passwords with anyone. We will never request your password or personal details.