Loading story…
Austrian DRM vendor Denuvo filed suit in the U.S. District Court for the Northern District of California against the anonymous game cracker known as voices38 and ten unnamed defendants. The complaint alleges that voices38 reverse-engineered and bypassed Denuvo Anti-Tamper protections in at least 26 PC games, enabling distribution of cracked copies, including through Reddit.
Because Denuvo does not own the copyrights in the affected games, it alleges violations of the DMCA's anti-circumvention provisions rather than direct copyright infringement. Denuvo seeks damages and an injunction barring current and future bypass activity, and may request identifying records from Valve, Reddit, and Discord for accounts and seven Steam profiles it believes are linked to the defendant; the allegations have not yet been tested in court.
See the reporting duties and controls this puts on the clock.
4 events from the most recent confirmed update back to the earliest known activity.
Denuvo filed suit in the U.S. District Court for the Northern District of California against the anonymous cracker voices38 and ten unnamed defendants. The complaint alleges circumvention of Denuvo Anti-Tamper protections in at least 26 games and seeks damages and an injunction under the DMCA's anti-circumvention provisions.
voices38's alleged cracking activity increased during the summer, including the release of five cracked games in a single day in early September.
Responding on Reddit to news of Denuvo's lawsuit, voices38 stated that activity would continue as usual.
After Denuvo's complaint was prepared, voices38 reportedly released cracks for Persona 3 Reload and Star Wars Outlaws.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
3 references tracked. Mallory keeps watching after this page renders.
xakep.ru
Open sourcetomshardware.com
Open sourcetorrentfreak.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Denuvo’s anti-tamper protections have been significantly weakened by two parallel developments: a widely adopted hypervisor-based bypass that has enabled near zero-day piracy of protected PC games, and a reported full crack of **Resident Evil: Requiem** by `voices38` that allegedly removes Denuvo entirely. The bypass has already been used across multiple newer titles, accelerating repacks on piracy sites, while the full crack is described as a more complete defeat that strips the DRM rather than merely spoofing its checks. Tom’s Hardware reported that the cracked build of *Resident Evil: Requiem* ran faster and used less VRAM and system memory than the bypassed version, with claims of roughly 5% higher FPS. The hypervisor method has also raised serious security concerns because users have reportedly had to disable key Windows protections, including **VBS**, **Credential Guard**, **Driver Signature Enforcement**, and **Core Isolation/Memory Integrity**, before installing a community-made hypervisor operating at a privilege level above the OS. That setup could create opportunities for stealthy system compromise or exploitation of flaws in the hypervisor itself, prompting warnings even within piracy circles. Denuvo parent **Irdeto** said it is developing countermeasures and asserted that its response will not further degrade performance or require deeper operating-system access, but the emergence of more plug-and-play bypasses suggests the company is facing a broader erosion of its DRM model.
Jun 29, 2026
The **FBI** is seeking victims as it investigates a suspected cybercriminal who published multiple **malware-tainted games** on **Steam**, using seemingly legitimate titles as Trojan horses to infect players' systems. The games named by the agency include **BlockBlasters/BlockBasters, Chemia, Dashverse/DashFPS, Lampy, Lunara, PirateFi, and Tokenova**, and were reportedly available between **2024 and 2026**. Both reports indicate the titles were functional enough to appear legitimate, but were designed to deliver malware and compromise users after installation. The reported impact includes **account compromise, information theft, and crypto-wallet draining**, with one cited case involving the theft of **$32,000 in cancer donations** from a streamer after exposure to one of the malicious games. The investigation suggests the listed titles may have been developed by the **same threat actor**, and that the number of affected users remains unknown. The case also highlights ongoing weaknesses in marketplace screening, as malicious games were able to reach Steam users before being removed by **Valve**.
Jun 29, 2026
Sony filed suit against George Hotz (**Geohot**) and members of **fail0verflow** after the PlayStation 3 jailbreak was published, seeking injunctions, turnover of hardware and software containing the code, and damages under claims including the **DMCA**, **CFAA**, California computer crime statutes, contributory copyright infringement, and violations of PlayStation Network terms. The legal action followed public disclosures showing that Hotz had combined hardware and software techniques to break into the PS3, while researchers and academics mirrored the jailbreak code in protest, arguing the publication raised First Amendment issues. Technical disclosures around the jailbreak showed that the PS3’s security model—despite its chain of trust, signed executables, hypervisor isolation, and anti-downgrade protections—had been undermined by multiple flaws. Researchers described attacks ranging from memory glitching and USB-based exploitation to downgrade abuse, culminating in a critical **ECDSA** implementation error in which Sony reused a non-random signing value, allowing recovery of private signing keys and enabling attackers to sign arbitrary code. The compromise opened the door to homebrew software and piracy, turning Sony’s platform-security dispute into both a major legal fight and a high-profile failure of console trust architecture.
Jun 29, 2026