Call of Duty hacker says "I had my fun" after reportedly getting thousands of Warzone and Modern Warfare 3 players falsely banned

gamesradar.com:

A hacker says they've got "thousands upon thousands" of innocent Call of Duty: Modern Warfare 3 and Warzone players banned using an exploit in the game's Ricochet anti-cheat system that's since been resolved.

Last month, Activision said it had found and fixed an exploit in Ricochet that resulted in the banning of "a small number of legitimate players," but a hacker going by Vizor told TechCrunch the number is a whole lot higher than that, and that they know because they're the one responsible.

"I could have done this for years and as long as I target random players and no one famous it would have gone without notice," said Vizor, who said it was "funny to abuse the exploit."

The method by which Vizor was getting Call of Duty players falsely banned sounds ludicrously simple, which is surprising given all the talk about how robust an anti-cheat system Ricochet is. According to Vizor, all they did was identify a list of hardcoded text that Ricochet was using to identify hackers and then message players with those unique "signatures." Bam, banned.

For example, Vizor said one of these signatures was "trigger bot," which is a cheat that automatically triggers a cheater's gun to fire when its crosshair goes over a target. Ricochet was scanning players' computers for that string of text, and so when Vizor would private message a player using that specific language, it would trigger an automatic ban.

"I realized that Ricochet anti-cheat was likely scanning players' devices for strings to determine who was a cheater or not," Vizor said. "This is fairly normal to do but scanning this much memory space with just an ASCII string and banning off of that is extremely prone to false positives," said Vizor.

"The same day I found this, I got myself banned by sending a whisper message on Call of Duty to myself with one of the strings in the message contents."

Weekly digests, tales from the communities you love, and more

To maximize banning efficiency, Vizor said they developed a