#rootkit

Your Anti-Cheat Is a Rootkit (And It Loads Before Your OS)

Vanguard boots before Windows does. BattlEye hooks syscalls. A 2024 academic paper confirmed what everyone suspected: kernel anti-cheats are rootkits, just ones you agreed to install.