Skip to main content

On Sale: GamesAssetsToolsTabletopComics
Indie game storeFree gamesFun gamesHorror games
Game developmentAssetsComics
SalesBundles
Jobs
TagsGame Engines
(-1)

Hey, i absolutely love this game, but recently when i was running a virus scanner on my mac i noticed that it caught something within your game called backdoor:OSX/CrossC2.Cobalt, which after some googling told me that it's a cross-platform malicious payload generated by CrossC2, which can allow attackers to extend Cobalt Strike into a few different systems.

As you can see in the image above, i have the option to repair such files, and when i did, i was unable to open the application afterwards. this has also occurred for other games i downloaded from itch.io, such as Incursion, another well-made and legit game which i have played before.

I don't know if that was added to the file after i downloaded this game or not, but you should probably investigate that sooner rather than later, because i love this game but i can't play it until i know its safe again.

(1 edit) (+3)

Can you confirm that this was from a recent download taken from this Itch page, and possibly name the virus scanner you used as well? I've tried to scan the Mac version of the file myself via multiple online resources and was not able to detect any malware. I've also asked to confirm if it came from this specific Itch page, as there are malicious websites out there who've redistributed the game and DLC with malware. It's possible you might've accidentally downloaded from the wrong website. (edit: I've since scanned the Windows version as well and found nothing.)

After doing a quick google search, I've noted that "Cobalt Strike" is an official and commercial platform used mainly by cybersecurity professionals to detect and simulate potential threats to a program. Since it only supports Windows users, all Mac and Linux users need to depend on "CrossC2" to extend its command-and-control (CD) capabilities. As you've used the Mac version, it theoretically makes sense for "CrossC2" to be present.

With that being said, bear in mind that I am not the developer (I am just an Itch moderator), but I believe this was just a false positive flagged by your malware scanner. I'd suggest trying others to see if you get a similar result.

Thank you for the reply, i downloaded the game directly from the downloads page, clicked through the pick your price thing and hit download on the mac version. this happened with my very old download then another one i downloaded five minutes before scanning it and got the same result. I use VirusBarrier Scanner. i'll try this with other scanners and get back to you. i just find it really annoying since i haven't had this problem before. thanks again!