MUST READ - Linux Cemu 2.6 Compromised
Cemu (The Wii U emulator) was recently compromised by a malicious attacker using a known developers account, this compromise took place from May 6th to May 12th, and introduces malware that is known to steal passwords, SSH keys, GitHub tokens, and likely more they are not fully aware of at this moment.
We recommend anybody who is on Linux or SteamOS to make sure the hash of the AppImage (Located in Home/Applications, right click Cemu AppImage, go into Properties, Checksums, and Calculate the SHA256 hash) matches the non-compromised version provided by the Cemu developers, if you have used Cemu from the dates I have mentioned, and the SHA256 hash does not match what is listed, assume your system may be compromised if it was ran.
If the hash matches, please go into the EmuDeck app, Manage Emulators tab, Cemu, and click Reinstall/Update, this will ensure there is not a malicious version on your device. If you are on Windows, MacOS, or used the Flatpak version, you are not affected by this malware. More information regarding this attack can be found here. https://rentry.org/cemu-security-psa
Comments (11)
I brought a micro SD card from aliexpress how do I import it to emudeck?
I lucked out, I had downloaded the malware but I hadn't launched CEMU after the download. To the best of my knowledge your system is fine if you hadn't launched the corrupt app. I had a bad hash and everything, but I simply did the Reinstall/Update and it downloaded a proper copy with the good hash. close one.
Which was your bad hash because I noticed a lot of people thought they had a bad hash but it was just Verizon 2.4 so it wasn’t
Can I assume this is not affected on Windows? Checked the link for those wondering "If you are a Windows or MacOS user you are not affected. If you are a flatpak user you are also not affected." I no longer use a Linux platform for gaming so no effect for me.
I hope you make a future update where it scans sha256 for us before installing
My hash is 0c20c4aeb800bb13d9bab9474ef45a6f8fcde6402cad9b32ac2a1bbd03186313 Am I safe? Sorry I'm panicking rn
The GOOD hash they provided is 0c20c4aeb800bb13d9bab9474ef45a6f8fcde6402cad9b32ac2a1bbd03186313 and it looks like that's yours. you should be good.
Hello! I am a steam deck user with emudeck installed. The cemu version displayed in emudeck is "2.5.0 - MAIN" and the Cemu.appimage SHA256 hash matches the good hash mentioned the website. I would like to ask if I am safe from the malware at the moment?
Would it be possible to do a Screening from EMUDECK to VIRUSTOTAL.com before any update is done? That way if any file is infected from original sources, Emudeck would be protecting us in a safe version. I was infected, I updated it during that time. And yeah I checked in Virustotal.com and it shows a Trojan. After uninstalling and installing back again from Emudeck CEMU. The hash is different and in virustotal no detections. BTW in virustotal you can also see the file hash. Thanks for the heads up, i saw the ping in Discord.
Omg is this dolthin ?
No Wii U