How to be safe on the Nexus?

[ElmoTheMuppet]

Hello, I wanted to ask this question awhile back around the time when certain user accounts were compromised and malicious files were uploaded to the Nexus.

Hopefully this topic might be useful for other users.

I apologize if this question was already asked. Hope someone can direct me to the original post.

 

• What are some things Nexus users can do to protect themselves while using the site?
• What tools or software can Nexus users use to protect themselves as well as identify suspicious activities?
• How can Nexus users identify a file as being malicious or compromised in some way?
• How can Nexus users identify a mod author's account as being compromised?
• What are some symptoms or activities that can occur on the Nexus that would be considered suspicious or malicious in some way?
• How can Nexus users check to see if they are connected to the real NexusMods.com
• What things should Nexus users consider first when using third party .exe or .dll files?

If there is another question I should be asking, please post below. Thanks!

 

[ModsRBest]

This is my first time to post and I also am interested in the response to this question

[Eiries]

• What are some things Nexus users can do to protect themselves while using the site?

Common sense is the best defense. I know that sounds like a cruel thing to say, but it really applies to anywhere on the internet. Also you ask a lot of questions that are more specific but related to this so I don't want to marry it.

• What tools or software can Nexus users use to protect themselves as well as identify suspicious activities?

Antivirus I guess. But really its not a big issue. But you should have it anyway. AVG, Comodo, Avast are all examples of free antivirus.

• How can Nexus users identify a file as being malicious or compromised in some way?

The Nexus has its own built-in virus detection that scans every file uploaded. But your antivirus is a great second layer. Also pay attention to the file being uploaded. Most of the time it's some knockoff name of another popular file, so google around a bit, check the mod author's profile and see their other contributions/comments. Much of the time they're people with almost no history who oftentimes joined just a day or two prior.

• How can Nexus users identify a mod author's account as being compromised?

Again rarely an issue, but I imagine you'll notice pretty quick when you see comments made that you didn't make or something. Follow standard protocol, especially a strong password you don't use elsewhere.

• What are some symptoms or activities that can occur on the Nexus that would be considered suspicious or malicious in some way?

This was mostly covered above so I won't focus on this.

• How can Nexus users check to see if they are connected to the real NexusMods.com

Check your url bar? Kind of weird question. The domain is nexusmods.com/game. skyrim, fallout3, what have you. Bookmark the main site for good measure. Recently the domain format was game.nexusmods.com, but link referrals with that setup will still redirect here.

• What things should Nexus users consider first when using third party .exe or .dll files?

Research. If its a mod with eight thousand endorsements I wouldn't sweat it. If its labeled "Nexus Modding Manager," has almost no description, and was uploaded by someone with no prior activity, maybe wait on it a bit if you're paranoid. Or even report it; a moderator can manually take a look and confirm its safety.

 

Reiterating: all things considered this is a very safe site. Any malicious file that manages to get up here gets taken down promptly. Been here for a long long time and I have yet to ever have a problem like an account getting hacked or a file giving me a virus.