Denuvo Sues Game Cracker ‘voices38’ for Bypassing its Anti-Tamper DRM

Earlier this year, a wave of hypervisor bypasses allowed pirates to ‘crack’ Denuvo-protected games on the day of release.

However, those bypasses weren’t Denuvo’s only headache. For those who preferred a less invasive approach, an anonymous cracker going by the name “voices38” continued to release many old-school cracks that patch Denuvo’s checks directly.

These traditional cracks don’t require users to disable Windows security features, which makes them quite popular. Catering to this demand, voices38’s output accelerated this summer, resulting in five Denuvo releases on a single day earlier this month. This didn’t go unnoticed at the Denuvo headquarters.

Denuvo Takes ‘voices38’ to Court

On Monday, Denuvo GmbH took legal action. In a complaint obtained by TorrentFreak, filed at the U.S. District Court for the Northern District of California, the Austrian company accuses voices38 of bypassing its Anti-Tamper technology on 26 games. This is a violation of the DMCA’s anti-circumvention provision, it argues.

Denuvo explains that the person using the ‘voices38’ handle has targeted the protection measures of a wide range of titles. This includes older titles such as FIFA 20 and PES 2020, as well as recent blockbusters including Hogwarts Legacy, Black Myth: Wukong, Resident Evil Requiem and Doom: The Dark Ages.

“Defendant is a computer hacker who is focused on reverse engineering, hacking, or ‘cracking’ video games employing Denuvo’s Anti-Tamper product,” Denuvo writes in the complaint, while mentioning that Reddit is one of their release channels.

“Defendant has bypassed DRM restrictions in copyrighted works, removing protections that allow copyright owners to restrict who may access their works, and allowing for pirated versions of those copyrighted works,” it adds.

Circumvention, Not Copyright Infringement

Denuvo doesn’t actually own the copyrights to any of these games. This means that Denuvo can’t sue “voices38” for traditional copyright infringement, as the game companies could.

Instead, Denuvo’s complaint relies on the anti-circumvention provisions of the DMCA. Under this section of US copyright law, it is prohibited to bypass a digital lock that controls access to a copyrighted work, or to distribute tools and instructions that help others to bypass copyright protections.

Importantly, the DMCA allows anyone that’s harmed by these bypasses to file a lawsuit. Denuvo argues that, since its entire business revolves around selling tamper protection to game companies including EA, Ubisoft, Capcom, and Sony, the cracks are directly hurting its business.

As far as we know, this is the first time Denuvo has sued a cracker in a U.S. court. While the lawsuit mentions game titles and their respective owners, none of the rightsholders are part of the lawsuit.

Reddit User, Steam Accounts and a Discord ID

The obvious problem is that nobody knows who voices38 is. The complaint names the defendant as “an unknown individual or entity,” together with ten unnamed Doe defendants.

Denuvo has done some homework, though. The filing lists a Discord user ID, a Reddit account and seven Steam profiles that it believes are linked to the cracker.

Denuvo hopes the information linked to these accounts will eventually unmask the cracker. Games have to be bought before they can be cracked, for example, and Steam purchases come with payment details.

With a case on file, Denuvo can ask the court for permission to subpoena Valve, Reddit and Discord for the associated account details. There’s no discovery request in the docket yet, but that will likely follow soon.

The complaint includes two DMCA anti-circumvention claims and requests damages, as well as an injunction that would bar voices38 from circumventing Denuvo’s Anti-Tamper protection in any games, including future ones that have yet to be created.

The ‘future’ part will be needed, as the list of 26 games was already outdated when the complaint was filed. In recent weeks, ‘voices38’ has released several new cracks, including Persona 3 Reload and Star Wars Outlaws.

What’s Next

Whether Denuvo will be able to identify ‘voices38’ has yet to be seen. Typically, these types of crackers take their precautions. But even if the subpoenas don’t deliver, the lawsuit is not necessarily pointless.

If Denuvo obtains a default judgment with an injunction, it will be easier to have accounts and download links removed.

A ruling in Denuvo’s favor could act as a deterrent, as confirmation that Denuvo can sue crackers directly may spook some people involved.

For now, the case is in its early stages. Time will tell what information Denuvo will request from Reddit, Discord and other third parties, and whether ‘voices38’ will make an appearance in court.

—