How Anti-Cheat Software Became Online Gaming's Biggest Arms Race

GamerXZenith

Well-Known Member
Full GL Member
Credits
5,299
Over 338 games now run kernel-level anti-cheat software that operates with the same system access as malicious rootkits, and the arms race between cheat developers and publishers shows no sign of slowing down.

1775544776524.jpeg


Cheating in online games is older than most of the players complaining about it. What changed is how publishers decided to fight back. The current approach involves software that sits inside your operating system's kernel, which is about as deep as a programme can go, and it runs every time you turn your machine on. Over 338 games do this now. Esports betting markets depend on match integrity more than casual players might realise, and anyone placing wagers through https://1xbet.ie/en/registration on a competitive title has real money riding on these systems catching what they are supposed to catch. The whole thing has turned into an expensive, mostly invisible war that neither side is winning cleanly.

What Kernel-Level Access Does to Your Machine

Your browser runs at user level. So does your music player. Kernel-level anti-cheat runs underneath all of that, at the same depth as your operating system itself. Riot built Vanguard this way for VALORANT. Activision built Ricochet for Call of Duty. EA rolled out Javelin for Battlefield. EasyAntiCheat covers 52 games on its own and BattlEye handles another 45.
A 2024 paper with the wonderfully blunt title "If It Looks Like a Rootkit and Deceives Like a Rootkit" pulled apart Vanguard and FACEIT's anti-cheat. The conclusion confirmed what a lot of security researchers had been saying quietly. These tools use the same OS-level hooks as malware. The researchers were clear that intent matters, and these are not malicious programmes. But the technical fingerprint is nearly identical. You have to operate at the same depth as the threat you are trying to stop. That is the deal, and most players accept it without reading the fine print.

Why Betting Markets Care About This

A cheating scandal in a major Counter-Strike tournament is not just bad for the game. It moves betting lines. CS pulled 64% of all esports betting volume in Q4 2024, with FACEIT's kernel-level system running underneath the professional scene. The esports betting handle hit $2.8 billion in 2025, and that kind of money makes match integrity a financial question, not just a fair play one.
If you are setting up a new betting account to follow esports markets, a deposit bonus gives the bankroll room to explore. By registering on the official 1xBet website, players have the opportunity to increase the maximum bonus on their first deposit using the promo code 1x_3831408. Before registering and making a first deposit, players must familiarise themselves with the terms and conditions of bonus crediting, the bonus amount, and the wagering rules. (The conditions and bonus amount vary depending on the country of registration.)
Prop bets make the problem worse. An aimbot that inflates a player's kill count by two or three per map is enough to tilt a stat-based market, and nobody notices until the match is over. Bookmakers have started flagging unusual performance spikes internally, but the detection mostly happens after the money has already moved.

Players Are Not Happy About It

Helldivers 2 sold brilliantly and got review-bombed on Steam almost immediately, mostly over nProtect GameGuard running at kernel level. The game's technical director posted a detailed rebuttal saying the claims about the software persisting after uninstallation were wrong. Players did not buy it. Riot went through something similar when Vanguard landed in League of Legends. PC crashes, angry forums, the usual cycle. Linux users got the worst end of the deal because most kernel-level anti-cheat does not work on Linux at all, which locks VALORANT and Call of Duty off the platform entirely.
Anti-Cheat
How Many Games
The Catch
EasyAntiCheat52+ titlesWidely adopted but controversial on Linux
BattlEye45+ titlesSolid detection, periodic false positive complaints
nProtect GameGuard16 confirmedDeveloper claims 330+, hard to verify
Riot VanguardVALORANT onlyBoots with your OS, stays running in background
Valve Anti-CheatHundredsUser-level, no kernel access, weaker detection

What Comes Next Is Harder to Stop

The newest cheats do not touch the game at all. Someone streams their gameplay to a second machine, runs AI image recognition on the feed, then sends aim adjustments back through a separate input device. The host system looks completely clean. Kernel-level detection cannot flag what it cannot see. Publishers are testing server-side behavioural analysis instead, watching for reaction times and accuracy patterns that fall outside normal human ranges. It works, but only after the match. Catching a cheat before it affects the result is still the part nobody has figured out.
 
Last edited by a moderator:
I'm fine with offline cheating, but never let it happen online.
 
Back
Top