DLSS Swapper creator Brad Moore is warning users that malicious actors are uploading compromised DLL files to the open-source utility, posing significant security risks to PC gaming enthusiasts.

Key Points

• Developer Brad Moore identified malicious DLL files being submitted to DLSS Swapper via the program's Manifest Builder repository.
• Attackers are using generic commit messages to disguise harmful code as legitimate updates for Nvidia DLSS, AMD FSR, and Intel XeSS libraries.
• VirusTotal analysis confirmed that at least one submitted third-party DLL file contained active malware.
• DLSS Swapper is a popular utility used to manually update or replace upscaling libraries in PC games to improve graphical performance.
• Users are advised to exclusively download official, vetted packages directly from the verified source to avoid system compromise.

Why it Matters

This security incident highlights the persistent risks associated with using third-party modding tools that rely on user-submitted code repositories. As upscaling technology becomes standard in PC gaming, users must remain vigilant against supply-chain attacks that exploit the trust placed in open-source software utilities.