Hacker after restarting the game.

[Kobret]

Hey guys, I’ve got a weird situation happening.

So I was playing and summoning to help with a boss fight. Right after I entered the fog, my character fell through the map, and this strange network message popped up: "?Network Message?". Right after that, I got kicked out of the game.

I restarted the game and tried again, summoning different people, but they were sent back to their worlds and I was sent under the map again.

I restarted once more, this time without summoning anyone, and the same thing happened. Now my question is: how is it possible that the hacker was still messing with me after restarting the game?

Restarting my PC seems to have fixed it, but honestly, I have no idea what was going on.

[Sparhawk 59]

he broke your save and game, do you have a back up manual save? if not then its delete that save and start fresh. in future make back up saves and keep them updated

[Kobret]

Originally posted by Sparhawk 59:

he broke your save and game, do you have a back up manual save? if not then its delete that save and start fresh. in future make back up saves and keep them updated

Ofc i have one, but the save is still working fine, and I managed to defeat the boss.

The strange thing is, it felt like the hacker was managing my session remotely or something like that.

I’ve encountered many hackers before, but this is the first time something like this has happened.

[Sparhawk 59]

https://steamcommunity.com/app/1245620/discussions/0/601897883113977525/ re install back up anyway

[Kobret]

Originally posted by csand:

Cheaters can bypass Steam block and do stuff like this with impunity from Linux/Proton

Make sure to tell Valve and Fromsoft your thoughts on it

I just hope they can’t mess with my PC like the RCE issue in DS3 did...

[dark-breed]

Originally posted by Kobret:

Originally posted by csand:

Cheaters can bypass Steam block and do stuff like this with impunity from Linux/Proton

Make sure to tell Valve and Fromsoft your thoughts on it

I just hope they can’t mess with my PC like the RCE issue in DS3 did...

they can not, this hacks manipulate variables that the invader and host share

[Kobret]

Originally posted by dark-breed:

Originally posted by Kobret:

I just hope they can’t mess with my PC like the RCE issue in DS3 did...

they can not, this hacks manipulate variables that the invader and host share

Nice to know

[dark-breed]

Originally posted by Kobret:

Originally posted by dark-breed:

they can not, this hacks manipulate variables that the invader and host share

Nice to know

basically in short explained what happens:

they manipulate environment variables on the own end and the netcode of the game writes this variables to your savefile. during the way they do it they know which variables get changed and can also return to the previous state of the own savefile easily, you not.

[Kobret]

Originally posted by dark-breed:

Originally posted by Kobret:

Nice to know

basically in short explained what happens:

they manipulate environment variables on the own end and the netcode of the game writes this variables to your savefile. during the way they do it they know which variables get changed and can also return to the previous state of the own savefile easily, you not.

Thanks for the explanation, but I’m still a bit unclear on how this works.

Even after restarting the game, the hacker was still able to manually manipulate my session (like sending my summons back to their world, causing an effect similar to activating a rune), even though I wasn’t interacting with him anymore.

I’ve now played for about 2 hours after restarting my PC and waiting some time, and everything seems fine.

Does restarting the PC fix this because it also resets the netcode, making it impossible for the hacker to access my session again?

[dark-breed]

Originally posted by Kobret:

Originally posted by dark-breed:

basically in short explained what happens:

they manipulate environment variables on the own end and the netcode of the game writes this variables to your savefile. during the way they do it they know which variables get changed and can also return to the previous state of the own savefile easily, you not.

Thanks for the explanation, but I’m still a bit unclear on how this works.

Even after restarting the game, the hacker was still able to manually manipulate my session (like sending my summons back to their world, causing an effect similar to activating a rune), even though I wasn’t interacting with him anymore.

I’ve now played for about 2 hours after restarting my PC and waiting some time, and everything seems fine.

Does restarting the PC fix this because it also resets the netcode, making it impossible for the hacker to access my session again?

you do not understand. the hacker manipulated your savefile and now it is no longer working correctly. i can not know what he manipulated in your savefile but it will not reset from alone.

ng+ or a new savefile is needed (or a backup before it got manipulated).

[Sparhawk 59]

Which is what i advised re installing your back up

[Sc0rpiTr0n]

Originally posted by dark-breed:

Originally posted by Kobret:

I just hope they can’t mess with my PC like the RCE issue in DS3 did...

they can not

At the moment. Give them some time

[dark-breed]

Originally posted by Sc0rpiTr0n:

Originally posted by dark-breed:

they can not

At the moment. Give them some time

all hacks so far do not use a RCE attack vector and it is basically impossible to perform a RCE attack with the changed netcode and EAC restrictions. RCE attacks need some form of variable overflow attack with the option to run this way injected code to initiate a RCE attack.

the netcode crash if someone try to transport a bigger variable value than the variable has now, not like in the previous games where the netcode transported such variables.

[Kobret]

Originally posted by dark-breed:

Originally posted by Kobret:

Thanks for the explanation, but I’m still a bit unclear on how this works.

Even after restarting the game, the hacker was still able to manually manipulate my session (like sending my summons back to their world, causing an effect similar to activating a rune), even though I wasn’t interacting with him anymore.

I’ve now played for about 2 hours after restarting my PC and waiting some time, and everything seems fine.

Does restarting the PC fix this because it also resets the netcode, making it impossible for the hacker to access my session again?

you do not understand. the hacker manipulated your savefile and now it is no longer working correctly. i can not know what he manipulated in your savefile but it will not reset from alone.

ng+ or a new savefile is needed (or a backup before it got manipulated).

Is ng+ enough? I mean, it’s a max ng character, so I don’t really care if he killed any bosses or did anything like that (though it looks like he didn’t). Also, just to confirm, he can’t mess with my other characters, right? (I have a backup, but it’s a bit old and I really don’t want to lose 100 million runes)

[dark-breed]

Originally posted by Kobret:

Originally posted by dark-breed:

you do not understand. the hacker manipulated your savefile and now it is no longer working correctly. i can not know what he manipulated in your savefile but it will not reset from alone.

ng+ or a new savefile is needed (or a backup before it got manipulated).

Is ng+ enough? I mean, it’s a max ng character, so I don’t really care if he killed any bosses or did anything like that (though it looks like he didn’t). Also, just to confirm, he can’t mess with my other characters, right? (I have a backup, but it’s a bit old and I really don’t want to lose 100 million runes)

there are some manipulations that also can not get fixed by going ng+.

some of them can get fixed by go new game (because this resets the manipulated variables)

-rubberbanding coop (you coop partner get attached to the back of your char)
-bosses die in the moment you enter the spawn zones
-you fall through the map and die, you respawn below the map and this repeats (this is the worst one and can only get fixed by modify the spawn variable with a cheat engine at deactivated EAC and offline so far we know)
-NPCs die the same way like the bosses (with this it depends on where in the game you are if you can go new game, since this can lock you out from new game activation)
-quest rewards do not appear (with this one it is not clear if invisible objects got spawned in your stash, there seams to be two of this hack one solvable by going new game and one where the stash no longer works correctly and also items disappear by send them to the stash)

there could be more but this are the most common ones i have seen happen.

[Kobret]

Originally posted by dark-breed:

Originally posted by Kobret:

Is ng+ enough? I mean, it’s a max ng character, so I don’t really care if he killed any bosses or did anything like that (though it looks like he didn’t). Also, just to confirm, he can’t mess with my other characters, right? (I have a backup, but it’s a bit old and I really don’t want to lose 100 million runes)

there are some manipulations that also can not get fixed by going ng+.

some of them can get fixed by go new game (because this resets the manipulated variables)

-rubberbanding coop (you coop partner get attached to the back of your char)
-bosses die in the moment you enter the spawn zones
-you fall through the map and die, you respawn below the map and this repeats (this is the worst one and can only get fixed by modify the spawn variable with a cheat engine at deactivated EAC and offline so far we know)
-NPCs die the same way like the bosses (with this it depends on where in the game you are if you can go new game, since this can lock you out from new game activation)
-quest rewards do not appear (with this one it is not clear if invisible objects got spawned in your stash, there seams to be two of this hack one solvable by going new game and one where the stash no longer works correctly and also items disappear by send them to the stash)

there could be more but this are the most common ones i have seen happen.

Thank you, i will investigate tomorrow and see what the hacker did.