How Riot Games is fighting the war against video game hackers

Unless there are video games, people are willing to find ways to cheat. The hobbies have dedicated themselves to find weaknesses in games for a long time, with the aim of developing frauds that they can share or sell. However, since online competitive gaming has become a legitimate profession, hobbies have become an entire industry that sells wrong benefits to those who want to pay.

Develop and sell the fraud of video games May be profitable businessAnd in recent years of video game developers have to make their opposition parties proud of their chit, whose goal is to ban the fraud, neutralize the software they use, as well as cheat developers. Further organization Taking Somewhat Controversial The kernel level drives the deployment of anti-cheat systems, which means they have the highest opportunities on the operating system and can probably observe everything that happens on the game-powered machine.

Is one of the most prominent kernel-level anti-chit systems VanguardRiots developed by games, which make up Popular Title Such as multiplayer online war arena Legendary league and First Person Shooter Online HeroismThe

Originally, Vanguard “forced Chit to be visible,” Philip Coskinas says the riots are the main and chief of the anti-cheet Description In one’s own “As an anti-cheet-craftsman” who left this world for a single purposes of banning the fraudsters from online video games. ”

Thanks to Anti-Chit team led by Vanguard and Coskinus, riots banned thousands of fraudsters Heroism Every day according to a chart shared with TechCrunch.

The riots seem to be working. In the early 2025, the percentage of the percentage Heroism “Rankd” Games – which means competitive matches – which contains cheat now less than 1% worldwide, The company saysThe

In an interview with Techcunch, the Coscinas riot’s anti-chit team uses various techniques to fight fraudsters and fraud developers: the protection features of Windows operating system, re-sending the hardware of fingerprinting cheater, and in an attempt by the cheater to prevent the psychological games to prevent them.

‘We can make them just like a fool’

Coscinas and most of his team’s efforts are with the deepest access to the gamer’s computer from Vanguard. For weed cheat, Vanguard already takes advantage of some security features built in the window.

First, Coscinus explained, the anti-chit software “almost universally” applied a few important security features of Windows, e.g. Trusted platform moduleA hardware-based security element, and BootThe These two technologies have examined that any computer has been fixed or tamper, such as malware or cheating and if it prevents it from booting it. Then, Vanguard verifies that all the hardware drivers on the computer, which allow the operating system to contact the hardware, have up to date to detect extra hardware that can enable deception. To the end, the code in the memory of the Vanguard kernel prevents the code loading and the fraud from performing.

“Basically, Microsoft and hardware manufacturers use or apply the security features that the operating system has gained to protect,” Coscinus told TechCrunch. “We have to have a playground where we can play. We need to apply a certain level of protection.”

But fighting against the cheetah is not just about technology; It’s about understanding the cheetahs themselves and how they manage.

He said that Coscinas had a “regeneration arm”, whose primary responsibility is threatened and catalog, which sometimes involves achieving deception. The team, like the intruding cheater and chit -developed communities for years, is like the infiltrating operations, using all the puppet identity.

“We have even gone in the case of giving anti-chit information to establish credibility. We masked we think it was something we had [reverse engineered]And explain how to show an anti-chit technique that we know staff, “Koskinas said.

Some cheating developers do not only sell and identify them to a few customers, basically marketing their product as high-survival or trying to identify them as “premium” fraud, as Koskinas called them. These premium cheats can spend thousands of dollars and only a few handfuls are sold to customers, Coskinas said.

Chit manufacturers use this strategy to reduce the risk of sale to a riot -disguised employee, but also to customers who will be more careful about cheating cheating and cheating.

These developers are basically selling “detection fame”, Coskinas said. One of the “strong weapons” of the anti-riots of the riots, he said, for example, banning all their players or depriving cheat developers in public Screenshot Shows they are inside their Discord channels.

“We can make them just foolish,” he said.

Coscinas and his team need to be careful not to come too tight. Something cheating can cause riot gamers to reduce better fraud in the cause. “If we hit every player every time they are not found to be detected they will only change the deceit.”

He added, “We ban the slow pace to continue cheating.

To stop repeating criminals, Vanguard can “fingerprint” the hardware using a cheater – effectively detects their device – for that player makes new fraud and continuing to continue cheating.
In more psychological strategies, Koskinas and his colleagues also publicly troll the cheater Calling themAmong other things, “a brainless pathogen”, whose “This video is unable to get well in this video game”.

Toolbox

Thanks to all these strategies and techniques, most fraudster can now be divided into almost two sections. First, mostly presents the fraudster, made by those who use simple cheap tools to “cheat anger” using easy cheap tools. According to Koskinas, riot workers are sarcastically called “download-a-centers”.

“Great cheater, if you think about it, they are a kind of young,” he said. “Many of them haven’t grown up yet. They cheat on the way to get involved in the games and that behavior is a lot of the way you do when you do it” like the power you feel “

“They will come back, they are going to be banned, and they are just going to do it for the next two to three years every weekend … and then, in the end, they will hit adolescence, and it is expected that it will,” Koskinas laughed.

There are some in the second division who use premium chit that is hard to detect. These tools are known as “external” fraud, explaining Coskinas, because they depend on the use of actual hardware, not just software.

One type of external deception depends directly on the attack of memory (DMA). For DMA Chits players need to use specialized hardware-thinking-high-speed PCI Express card – It goes out of all HeroismMemories on a separate computer that can verify the game on the dedicated hardware outside the scope of Vanguard.

By doing this, the separate computer of the leopard can be used to identify other players; In-game objects like walls, ammunition and weapons; And specifically identify where the players and items are on the map. It may also include objects that are not visible to the gamers. Then, using the firmware installed on the cards, the fraud creates a radar on the second screen that they can spot the rival players – even if they are hidden – to achieve an unfair benefit.

According to Coskinus, a more advanced version of this type of fraud depends on the HDMI fishers, which overloohes what is read by a separate computer on the original screen of the cheater. In this way, computer displays do not have to look at where the cheaters are opponents, allowing them to focus on the exhibition that is playing the game with them.

These techniques allow the fraud to see the walls through the walls – “known as”Walhacks” – and grant what is mentioned asExcessive sensitive perception“Basically the power in the game.

“I think we have identified most of it today, but it’s a kind of repeat,” said Coskinus.

Then there are screen reader chits, where the HDMI output of a computer is shipped to a second computer that identifies what is on the game’s display and classifies as the head of an opponent player. The second computer then returns an arduino mini-computer to control the robotic, for example, which is connected to the mouse of the cheater and lets the player automatically target other players — known as a fraud “IMBTThe “Koskinas said,” Basically all the motives and intentions are being guided by a machine. “

If deception performs well, it can be tough to detect, but Coscinas said that in the long run, the fraudulent “does not look like any human player” because they are noticed and shooting their rivals.

“You have to make humanity [the cheat] In a degree where a person can do what the advantage is inaccessible, “Koskinas said.” And once you get there, you are not really cheating enough to make it fit for most user. “

Nevertheless, this technique is popular, Koskinas acknowledges. The downside is that it requires a potentially expensive second PC with a rapid graphics processor that categorize what is happening on the screen and send back instructions.

Cheating

Koskinas says he is often concerned about the use of AI for screen classification, what human inputs look and how to reproduce them.

“It’s already here,” he said. “In particular Heroism With this bright outline, you can do it almost with an algorithm […] You can only say with actually discretion if the percentage of this box is purple enough then press the Fire key “ For the context, the Valorant’s characters are SchemeThe

Despite the risk of protection and privacy related to the kernel-level access to the anti-cheet technology, the riot has no plans to move away from its procedure for the at least for its anti-chit engine. Otherwise, according to Coskinus, the kernel absorbing for the cheater will make it very easy to use.

In general, trying to be more transparent about the anti -riot attempt with Coscinas publishing Several Blog Post How the company goes to the fraudster, as well as talking to journalists. He said the idea was because the riots “people always say” is the most aggressive anti-chit, “the players deserve to know how the players are using this opportunity.

Koskinas said, “The level of the level I can ask for and the best thing to do in such a surroundings is that I think we are as transparent about opaque as possible,” Coscinas said.

“We’re not telling you what you are talking to the bottom of the hood, but we will tell you almost something,” he said.