As long as there were video games, there were people who would be willing to find tricks. Lovers have been dedicated to finding vulnerabilities in the game for a long time and aimed to develop tricks that can often be shared or sold. But since online competitive games have become a legal job, hobby hacking has been transformed into a whole industry aimed at selling unfair advantages to those who are willing to pay.
Developing and selling video game cheats can be a favorable business, and video game developers have to neutralize and use cheat developers in recent years. More companies are doing some controversial stages in distributing anti -prevention systems running at kernel levels. In other words, it has the highest authority in the operating system and can monitor everything that occurs in the machine running.
One of the most prominent kernel -level anti -present prevention systems is Vanguard developed by Riot Games. League of Legends and Online first person shooter evaluation.
In essence, VANGUARD said, “I force it to be forced to look for it.” Riot’s anti -chief and Chillip Koskinas said Riot’s cheater, who described it as an “anti cheet craftsman,” who was on the earth for a unusual purpose of banning a scammer in an online video game.
Thanks to the anti -check team led by Vanguard and Koskinas, Riot prohibits thousands of frauders. evaluation According to the chart shared with Techcrunch, every day.

The hard work of the riot seems to be effective. As of early 2025, ratio evaluation The company said that the game, which means “competitive economy” with a scammer, is currently less than 1% worldwide.
Koskinas in an interview with TechCrunch details the various strategies of RIOT’s anti -Shete teams used to fight a cheat and deception developer. Use the security functions of the Windows operating system, fingerprints the hardware of the scammer, penetrate the cheat community, and stop psychological games to prevent psychological games from playing psychological games.
‘We can just make them look stupid’
Koskinas and his team’s efforts come from VANGUARD with the deepest access permissions of VANGUARD. To get rid of the scammer, Vanguard uses some security features built into Windows.
First, KOSKINAS has enhanced the most important security features of some Windows, such as reliable platform modules, hardware -based security components and safe booting, “almost universal” software. These two technologies make sure that computers such as malware or cheats have been modified or altered, and then prevent booting. Then VANGUARD verifies if the operating system can identify additional hardware that allows all computers to communicate with hardware. Finally, Vanguard prevents cheats from loading and running code in kernel memory.
Koskinas said, “By default, Microsoft and Hardware Manufacturers use all the security features used to protect the operating system.” We must have a playground that can be played. We must have a certain level of security. “
But the fighting person is not about technology. It is also about understanding the scammer itself and how to operate.
He said that the team of Koskinas has a “reconnaissance arm”, he said. The team uses an identity when the socks that have penetrated the cheats and cheat developer communities for many years to get partially deceived.
“We’ve been far away as long as we offer anti -cyte information to establish reliability, as if we were as if we were engineering something, we would explain how the anti -story technology works to show us how we know things.” You can sit down and take over the user and then prohibit everyone. ”
Please contact us
Do you develop cheats, hack video games, or work in anti -cyte? We want to hear your opinion. Lorenzo FranceSchi-Bicchierai in a non-working device and network, you can safely contact the signal of +1 917 257 1382 or Telegram and Keybase @lorenzofb or email.
Some cheat developers try not to detect them by selling them only to a small number of customers, as Koskinas calls. The premium cheat can take thousands of dollars and will only be sold to a few customers, Koskinas said.
Cheat manufacturers use this strategy to use this strategy to reduce the risk of sales to Riot Undercover employees and use it for customers who can be more careful about blatant cheating and cheat exposure.
The developers are essentially selling “unknown reputation,” Koskinas said. He said that one of Riot’s Cheat Anti-Cheat team’s “most powerful weapon” is that he is publicly disbelishing the cheat developer by leaking a screenshot that prohibits all players or shows that it is inside the inconsistency channel.
“We can just make them look stupid,” he said.
Koskinas and his team should also be careful not to get too hard. With some cheating within the reason, Riot can prevent gamers from getting better tricks. “If we hit all the players every time, they will change the cheat until they find an unknowing person,” he said.
“We are prohibited slowly to keep growing tricks,” he added.
To prevent repeated criminals, Vanguard makes it harder for players to get new cheats and continue cheating so that they can “fingerprint” the hardware used by a scammer.
In a more psychological strategy, KOSKINAS and his colleagues also call the con artists publicly by calling them “a pathogen without a brain that cannot play this video game well.”
Toolbox
Thanks to all these technologies and strategies, most con artists can now be divided into two categories. The first representing most of the scammers is made by people with “anger tricks” using cheap tools that are easy to detect. According to Koskinas, the riot staff cynically calls this cheat “download-van.”
“Many scammers, if you think about it, they are young,” he said. “Many people have not grown yet. The way they participate in the game are tricks, and many of them are the power you feel when you do it.”
“They will be back, prohibited, and they will do it for two to three years every weekend, and eventually they will hit puberty,” Koskinas said.
The second category consists of a small number of categories using a premium cheat that is difficult to detect. Koskinas explains that these tools are known as “external” tricks. Koskinas explains because it relies on using real hardware as well as software.

One type of external cheat depends on direct memory access (DMA) attacks. DMA tricks must be used by the player (high -speed PCI Express cards. evaluationMemory of a separate computer that allows you to carefully investigate the game on a dedicated hardware outside the range of Vanguard.
This allows you to use a separate computer of a scammer to identify other players. In -game objects such as walls, ammunition and weapons; Identify the location on the player and the item. This can also include an invisible object for gamers. Then, using the firmware installed on the card, the cheat can create a radar on the second screen so that even if the rival player is hidden, it can be seen to get an unfair advantage.
According to Koskinas, the more advanced version of this type of cheat relies on HDMI fuser and overlays what you read on a separate computer on the main screen of Cheater. In this way, a scammer does not need to see between computer displays and can see where the opponent is and focus on the game that plays the game.
Through this technology, a scammer allows you to see the walls called “wallpaper” and give it a super power in the game to say “extra sensory perception”.
Koskinas said, “Today we think we detect most of today, but it is repeated.
Then you can deceive the screen leader. Here, the HDMI output of the computer is sent to the second computer that detects and classifies the contents of the game display, such as the opponent’s head. The second computer then sends instructions to Arduino mini computers to control robotics. For example, other players are connected to the mouse of a scammer and the player, which is a cheat type known as “AIMBOT”, can be automatically aimed at. As Koskinas said, “Basically, the mouse is dominated by the machine for all intentions and purposes.”
If the cheat is done well, it may be difficult to detect, but in the long run, in the long run, the scammer said that it is not like a human player, because it is how accurate it is to aim for rivals and shoot.
Koskinas said, “We need to humanize humanization (cheat) that is not noticeable in what humans can do.” And once you are there, you don’t deceive most users.
Nevertheless, this technology is popular, Koskinas admits. The disadvantage is that you need a potentially expensive second PC with a fast graphics processor to sort out what’s happening on the screen quickly and to send the guidelines again.
The future of cheating
Koskinas often says that I often worry about the use of AI in screen categories and how to learn how human inputs look and reproduce.
“I’m here,” he said. “especially evaluation If you use such a bright outline, you can almost do it with algorithms (…) If the percentage of this box is purple, you can actually speak carefully. Press the Fire key. ” In the context, Valorant’s characters have a distinct and vivid color scheme.
Despite the risk of security and personal information protection associated with anti -Cheat technology with kernel -level access, RIOT is at least for Valorant to get out of the frozen engine’s approach. Otherwise, according to Koskinas, it is too easy for a scammer to use the kernel exploit.
In general, KOSKINAS is making more transparent efforts to prevent RIOT’s preservation by posting several blog posts on how to chase a fraudster and talking with journalists. He said Riot said, “The player should know how the company is using the privilege because it has the most invasive prevention by asking people to ask for a service.
Koskinas said, “The best thing we can do when we ask for access to that level and do that is to be transparent about the opacity we can.
“We don’t tell you what is under the hood, but we will tell you almost different things.”