GameIndustry.eu Logo

2022 2014 2016 2019 2023 2017 2023 
GameIndustry.eu /  Blog /
EnglishEasy Anti-Cheat


Easy Anti-Cheat

Published: 14.12.2019 Edited: 06.01.2025

Easy Anti-Cheat is an anti-cheat service of Kamu Game Security, which uses state-of-the-art hybrid technology to counter hackers and fraud in multiplayer PC games and is either secretly installed during games or requires manual consumer involvement.




Easy Anti-Cheat Criticism


Easy Anti-Cheat (abbreviated as EAC) is repeatedly criticized for several reasons.

In 2018, Kamu was acquired by Epic Games, Inc., and since then, the Easy Anti-Cheat service (EAC) has been fully integrated into the Epic Online Services infrastructure.

In 2012, the Chinese conglomerate Tencent Holdings acquired a stake of approximately 48%, valued at $330,000,000, in Epic Games, Inc.. This caused many players worldwide to take notice, as they were concerned about data transfers to China. Another point of criticism is simply overreach, as EAC is often mandatory even for single-player modes.

On Windows systems, EAC deeply integrates into the operating system by nesting itself in system folders. Additionally, EAC operates on a kernel basis, repeatedly raising security and privacy concerns. Previous controversies regarding kernel access by EAC and other anti-cheat programs are thoroughly documented and can be read about on numerous platforms and specialized websites.

Anti-cheat programs also pose a significant problem for Linux users, as games using these services often receive limited to no support on the platform.


Examples with EAC


     
     
     

Data transfer via POST

The name "Hydra" in the domain name aptly fits an anti-cheat service like Easy Anti-Cheat, as it continuously collects enormous amounts of data and constantly changes IP addresses. The data transmission itself is encrypted to both make it harder for cheaters to gain access and to conceal the internal processes from regular users. This is particularly interesting since anti-cheat programs interact with system processes.

Identifiable transfer variables, including Steam/Account ID, unique UUID, player name, and timestamp.

  https://hydra.easyanticheat.net/api/v1/games/321/client/message/?uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx&format=binary&playerguid=76561198113455411&ownerguid=76561198113455411&client_ip=0.0.0.0&playername=ペンギン&playerflags=0&sessionid=6D54365967EEF835C135C64843C58270554A46BAD0D09B00BEE276C68A1FE415&sn=39

uuid: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
format: binary
playerguid: 76561198113455411
ownerguid: 76561198113455411
client_ip: 0.0.0.0
playername: ペンギン
playerflags: 0
sessionid: 6D54365967EEF835C135C64843C58270554A46BAD0D09B00BEE276C68A1FE415
sn: 39

00 00 00 00 6A 00 00 00 04 00 00 00 09 00 00 00 | j <
2F EF 64 81 C1 D1 CD 12 8B 97 B6 3A 3A 84 AA C8 | /鸞Áэ ‹—¶::„ªȍ
7A 7E FC 9D 6D 54 36 59 67 EE F8 35 C1 35 C6 48 | z~ü mT6YgÁ5ƈ
43 C5 82 70 55 4A 46 BA D0 D0 9B 00 BE E2 76 C6 | CłpUJFºА› ¾ⶆ
8A 1F E4 15 00 00 00 00 EC 8C 23 21 59 84 A6 ED | Š 䠠 쌣!Y„¦퍊EA E6 4A 03 08 45 CC DA 11 E2 7B 05 11 E2 0F 46 | ꦊ E̚ ⻠
07 48 6C A1 02 AC 2C 50 51 67 54 BD 89 F8 91 6D | Hl¡ ¬,PQgT½‰ø‘m
DE 76 | ޶

Those who want to learn more can find detailed information on the secret.club   website, which extensively covers Reverse Engineering.


GET


Simple status feedback upon successful delivery with a simple 'OK' in a basic HTML structure.

  https://hydra.easyanticheat.net/service/v1/games/321/status/?uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

uuid: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8"/>
<title>EasyAntiCheat</title></head>
<body>
<div style="text-align:center"><p>OK</p>
</div>
</body>
</html>

Overview of the connections established by Easy Anti-Cheat


As is often the case with large data volumes and analytics, the technology giant Amazon.com, Inc. is closely involved. Services such as Amazon Elastic Compute Cloud (Amazon EC2) and Amazon Cloudfront are utilized.

 

Elden Ring - EAC Struktur bei Epic
Easy Anti-Cheat on Epic Servers

For the 2022 game Elden Ring by From Software, Inc. found Easy Anti-Cheat as the main service directly on the servers of Epic Games, Inc.


Easy Anti-Cheat on Epic-Servers


Since the acquisition of Kamu (Game Security) in 2018 by Epic Games, Inc., the original developers of Easy Anti-Cheat, the service has become an integral part of the Epic Online Services ecosystem and is fully integrated there.

 C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.sys

modules-cdn.eac-prod.on.epicgames.com
https://modules-cdn.eac-prod.on.epicgames.com/modules/ac86b64f6651465992fb5015a55fc837/3428cc35ba81477b890bc4a9c774ca88/wow64_win64
gossip.easyanticheat.net

EAC Domains & Ipv4


EAC_IPv4_and_Domains.txt (3.65 KB)
Date: 2025-01-29
CRC32 Hash: ed6691d4
SHA-256 Hash: d2eb4303131c93332cb56b48ee1611462126e206a065d417fccfed42eb5498d8

 

Your opinion is important – please leave a comment!

BB-Code Formatting
Comment rules

×

BB-Code Explanations

Here are the BB-Codes you can use:

  • [b] for bold text: [b]Text[/b] turns into Text
  • [i] for italic text: [i]Text[/i] turns into Text
  • [u] for underlined text: [u]Text[/u] turns into Text
  • [spoiler] for hidden Text: [spoiler]Hidden Text[/spoiler] turns into Hidden Text
  • [url] for hyperlinks: [url]http://example.com[/url] becomes a clickable link  
  • [url=link]text[/url] for named hyperlinks: [url=http://example.com]Visit me[/url] turns into Visit me  
  • [github] for GitHub links: [github]http://github.com/example[/github] turns into a  GitHub-Link

0 Comments