1. Trouble with the game?
    Try the troubleshooter!

    Dismiss Notice
  2. Issues with the game?
    Check the Known Issues list before reporting!

    Dismiss Notice

MALWARE ATACK

Discussion in 'General Discussion' started by Cobra Modding, Nov 17, 2025 at 12:35 AM.

  1. Cobra Modding

    Cobra Modding
    Expand Collapse

    Joined:
    Oct 13, 2025
    Messages:
    7
    As you probably already noticed that our Renault/Dacia Duster has been taken down. It was taken down cauz we have seen our mod on Modland reuploaded by user Bruno32600.
    So we decided to download it on our PC. When we tried to download the mod all sorts of viruses like OperaSetup.exe and liabodswous.co.in tried to scam us. When we finally downloaded it without the malware, we found out that there were heaps of unnecessary JavaScript files. We also discovered that it had a RAT ( Remote Access Trojan ) and he delated the Renault/Dacia Duster of the BeamNG Forums.
    So, do not download any mods of user bruno32600 cauz he puts trojans in all of his mods.
     
    • Like Like x 4
    • Agree Agree x 1
  2. BlazerNG

    BlazerNG
    Expand Collapse

    Joined:
    Apr 10, 2023
    Messages:
    40
    Yeah, OperaSetup.exe downloading on its own is unfortunately “normal” on ModLand. It happened to me as well. :D Just change your browser settings so it always asks where to save files before downloading anything - you can simply deny it next time. As for the mod itself, did you take a look at those JavaScript files? What were they supposed to do? Also, how did he even get access to your mod if you hadn’t released it yet?
     
    • Like Like x 1
  3. mimolli

    mimolli
    Expand Collapse

    Joined:
    Jan 27, 2025
    Messages:
    356
    i think its maybe real opera or its the real deal with malware etc.
    --- Post updated ---
    ever mod?
     
  4. BaconBeam

    BaconBeam
    Expand Collapse

    Joined:
    Dec 26, 2024
    Messages:
    137
    I cant remember if I ever downloaded some of his mods but maybe i did. (i always scan with virustotal, and I only use mods that are 0 virus rating)
     
  5. RobloxFan2

    RobloxFan2
    Expand Collapse

    Joined:
    Aug 28, 2019
    Messages:
    819
    First, your mod was taken down because there was proof that YOU stole it from Modland and simply reuploaded it onto the forums with the original authors name and everything still there.
    Second, I downloaded the mod file posted by bruno32600, and I found ONE JavaScript file that was necessary called "gauges_screen.js". I would like to remind you that even official vehicles like the ETK 800-Series have this same file. If you actually made the Duster mod, you would know that. also something to note, your upload of the mod also had the same Javascript file...
    Third, like you said in your original post "IF ANOTHER WINDOW OR TAB POPS UP ASKING YOU TO VERIFY OR CHECK A BOX ETC, CLOSE THE TAB
    AND PRESS DOWNLOAD AGAIN. (IF IT KEEPS POPPING UP KEEP CROSSING IT OUT AND KEEP PRESSING DOWNLOAD UNTIL IT BEGINS TO DOWNLOAD, IF YOU HAVE AD BLOCKER YOU SHOUD BE OK)" upload_2025-11-18_17-45-14.png
     
    #5 RobloxFan2, Nov 18, 2025 at 11:45 PM
    Last edited: Nov 19, 2025 at 12:00 AM
  6. hamster081

    hamster081
    Expand Collapse

    Joined:
    Aug 14, 2024
    Messages:
    173
    i missed that at a family shindig Anyways the sane thing happened with American Roads Mods are like Russian Roulette
     
  7. cryos223

    cryos223
    Expand Collapse

    Joined:
    Today
    Messages:
    1
    never have and never will download from this guy
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice