IbizaPocholo
NeoGAFs Kent Brockman
Denuvo Is Aware Of Hypervisor Cracks And Is Working To Combat It
The popular Hypervisor method has made day-and-date cracks of new titles, like Crimson Desert, possible.
In recent weeks, Denuvo, the highly controversial anti-tamper DRM software that is bundled with some of the most popular games released on Steam, has suffered some major hits, thanks to a new exploit being used by pirates called the "Hypervisor Bypass."
Whereas past pirates had to wait until the publisher stopped paying for Denuvo before "cracking" a game, the Hypervisor method has led to day-and-date bypasses of titles, including Crimson Desert and Resident Evil Requiem.
Now, Irdeto, the parent company of Denuvo, has confirmed that it is aware of the methods being used and that it is actively working to combat them.
"We're already working on updated security versions for games impacted by hypervisor bypasses," Daniel Butschek, Irdeto's head of communications, told TorrentFreak. "For players, performance will not be compromised by these strengthened security measures."
As for what those countermeasures are remains to be seen. Butschek did confirm that they will not involve Denuvo moving into deeper kernel levels of Windows, as previously theorized by PC enthusiasts.
"Addressing hypervisor-based workarounds will not require Denuvo to move into Ring -1 or deeper kernel level, and that is not the direction we're pursuing," Butschek said.
Beyond confirming that the company is aware of the ongoing bypasses, Butschek also reiterated an important caveat to the whole Hypervisor method: security.
"Hypervisor‑based bypasses rely on installing a custom, self-signed hypervisor that operates below the Windows kernel, giving it far broader control than a normal driver," Butschek said. "To run, users must disable major Windows security protections such as Virtualization‑Based Security (VBS), Hypervisor‑Enforced Code Integrity (HVCI) and driver signature enforcement, which are designed to prevent kernel‑level malware, rootkits, and ransomware"
Want clearer context on DRM, hypervisor bypasses, and anti-tamper security trade-offs? Subscribing to the newsletter provides in-depth coverage and expert context on these topics so you can understand the technical and policy implications.
Denuvo and Irdeto are doing their part, but it is worth noting that the Hypervisor method has undergone some serious security moderation. There's an entire oversight community and strict rules that pirates adhere to before they become public. Pirates will also urge that there are security concerns with any download and not just specifically Hypervisor.