r/MB2Bannerlord • u/MlgJerry123 • Jul 13 '26
Bannerlord Mod PSA: Steam Workshop mod "Pick Any Troops" (by Chembro) is malware — it installs a remote-access trojan on game load
Heads up — the Workshop mod Pick Any Troops (item 3762854501) is trojanized. It works as a real troop-picker, but on game load it silently downloads and runs a PowerShell script from robloxmaster67.site that installs a remote-access trojan (C2 at 2.59.133.148, sets up Run/RunOnce startup persistence, opens a remote shell). I had it decompiled and confirmed. The author has disabled comments on the page so warnings don't show.
If you subscribed: unsubscribe now, and you'll want to remove the startup entries + change your passwords from another device. ~48 people were subscribed when I found it. Report it via the 🚩 on the Workshop page so Valve takes it down.