Simandy and TheNinthWaveSims Custom Content Creator accounts have been compromised in the latest SimFileShare hack.
Latest updates as of 15th April: SimsFileShare has now paused uploads temporarily while they investigate the issue, and Pixelunivairse’s SFS has also been compromised according to our readers.
It has recently come to light in a sims after dark discord server post that Simandy’s and TheNinthWaveSims SimFileShare account has been hacked.
Many download links previously associated with the CC for these creators have been replaced with a zip file containing a single executable file labelled “install.exe.”
This file is almost certainly malicious, and we strongly advise against downloading, unzipping, or executing it under any circumstances to keep your game and your computer safe.
The discord server post reads:
WARNING: DO NOT DOWNLOAD ANY SIMANDY CC FROM SIMFILESHARE (SFS)!
Simandy’s SimFileShare account has been hacked, and many links leading to her CC have been replaced by a zip containing just one file called “install.exe”.
This is almost certainly malicious. Do not download these files. Do not unzip these files. Do not click or run these files. Do not allow these files to remain on your computer.
Note that unlike previous malware coming from Sims mods, this one does not rely on you running the game with a script file installed, so ModGuard will not help stop any infection. However, if you have unzipped these exe files into your Mods folder, get rid of them anyway! And if you don’t have Modguard installed, go get it anyway.
If you have already downloaded any CC from Simandy’s SFS account in the past 24 hours, DELETE THEM immediately, and RUN A VIRUS SCAN on your computer.
We will update with more info as it becomes available. Stay vigilant, be on the lookout for similar hacks on SFS or other platforms, as these malware outbreaks historically have not been isolated to one creator. Remember to never click dodgy files.
Simandy addressed this situation on her tumblr page, stating:
DO NOT DOWNLOAD ANY OF MY CC THAT LEADS YOU TO SIMFILESHARE.
You have been warned so, from this moment on, don’t come at me telling it was my fault you got malware. I’ll tell you when it’s fixed.
We will continue to monitor the situation and share updates as they become available.
In the meantime, we would urge everyone to exercise caution, review recent downloads, and take appropriate security measures like running antivirus scans or installing the ModGuard mod by TwistedMexi as a precaution.
Unfortunately, this isn’t the first time we’ve seen hackers target creators, and it likely won’t be the last. These kinds of attacks can happen to anyone, and they’re usually not just isolated to one person. So it’s a good idea to be extra cautious about downloading CC right now across all platforms.
Protecting your system and preserving the integrity of your game is of the utmost importance.
General advice to protect your computer when downloading custom content online
Always remember that Sims 4 custom content files should only have the .package or .ts4script extensions. Never download or run .exe files, and ideally avoid automatically unpacking ZIP or RAR files directly into your Mods folder. Instead, inspect each file individually to ensure it’s safe. Always verify that you are downloading from official, creator-posted links, and avoid suspicious URLs, especially those using link shorteners.
It’s also important to stay on top of security hygiene. As well as regular antivirus scans and the ModGuard mod mentioned above, consider setting up a weekly system restore point in Windows before adding new mods and back up your important files regularly. this includes Sims saves, mods, and any personal documents. If you use services like Google or Firefox, take advantage of features that scan for password breaches, enable two-factor authentication, and routinely check logged-in sessions across your accounts.
Lastly, for both creators and players: be mindful and cautious. Don’t rush to download every new mod or piece of CC, take a moment to ask yourself if you actually need it. For creators, regularly monitor your files and hosting platforms to ensure nothing has been tampered with. These precautions might not guarantee 100% protection, but staying vigilant and informed will greatly reduce your risk of encountering malicious content.
Update 17:50: It’s now also been confirmed that creator TheNinthWaveSims has had their SFS account compromised too.
Pixelunivairse’s SFS has also been compromised. I tried to download from them yesterday (4/14) and my computer gave me a warning that the zip file had a virus or malware.
This is affecting other Sims games as well. My browser is blocking vegan-kaktus who also runs sims2packrat, a tumblr that is trying to save old S2cc from being lost. Huge archive. I hope it isn’t all gone, it will be a big loss to the S2 community. I’m not sure about S3 or S4 but sfs is used a lot in S2.