Warez groups are teams of individuals who have participated in the organized unauthorized publication of films, music, or other media, as well as those who can reverse engineer and crack the digital rights management (DRM) measures applied to commercial software. This is a list of groups, both web-based and warez scene groups, which have attained notoriety outside of their respective communities. A plurality of warez groups operate within the so-called warez scene, though as of 2019 a large amount of software and game warez is now distributed first via the web. Leaks of releases from warez groups operating within the "scene" still constitute a large amount of warez shared globally. Between 2003 and 2009 there were 3,164 active groups within the warez scene, with the majority of these groups being active for no more than two months and with only a small fraction being active for many years. The warez scene is a very competitive and volatile environment, largely a symptom of participation in its community being illegal in most countries. Groups are generally not driven by profit, but by reputation.
3DM is a Chinese video game cracking group. Their founder and leader is reported to be a woman using the pseudonym "Bird Sister" (simplified Chinese: 宿菲菲; pinyin: Sù Fēifēi) but the identity or gender has never been confirmed. Unusual for piracy groups, 3DM's members have public profiles on the social network Sina Weibo, and use a blog to inform the public about their activities. Some members of 3DM have previously been part of NETSHOW, a group which released Chinese language copies of games using stolen cracks directly to warez scene FTP sites.
3DM were one of the first peer to peer file sharing groups to offer cracks for games which utilized DRM produced by Denuvo. As newer versions of Denuvo DRM became more challenging to reverse engineer, 3DM gave up trying to crack games with Denuvo DRM.
In 2016 the group claimed that piracy of games produced by large developers and publishers would be impossible in the coming years, due to the technological challenges of reverse engineering and ultimately cracking the virtualization and licensing schemes employed by new DRM solutions like Denuvo. One of the most notable groups on the web at the time, they publicly announced a year hiatus from developing cracks for games. Since returning in 2017, 3DM have only released games which use Steam licensing, only releasing copies of better protected games which include cracks made by other groups. This practice has been criticized by the groups whose cracks were included in releases under the 3DM name.
Automation was one of the largest cracking crew associations on the Atari ST. Several cracking groups were gathered under this label, most notably LSD, Was Not Was, The Lost Boys and Bad Brew Crew. They famously released their compact discs with each disk typically containing several games. Automation split up in the early 1990s after the release of Compact Disk 512. Several members founded a new cracking group called D-Bug.
Centropy, founded in January 1999, was a warez group which specialized in releasing copies of films, many of which were still in theatres. Touting many "0-day" releases and releases prior to commercial availability, Centropy released and pre-released numerous films.
CLASS (also known as CLS) was a warez group which was the target of federal raids such as Operation Fastlink. They were a global group with members worldwide, often releasing game "rips". The group ceased operations in 2004 after their 1,234th release.
CODEX (also known as CDX) – is a warez group founded at the end of February 2014. They are known for releasing copies of games which use Steam licensing and also for emulating Ubisoft's Uplay DRM protection. They were accused by the warez group SKIDROW of stealing their code to crack Trials Fusion, something CODEX denied, stating that they had written their own code for the DRM emulation. From 2016 to 2020 they have been one of the most active warez groups releasing commercial computer games with over 3700 releases in less than 6 years, compared to older groups like SKIDROW having fewer than 2500 over more than a decade of activity.
In late 2017 CODEX gained notoriety by becoming the third scene group (and fifth overall entity) to crack Denuvo DRM when they released a cracked version of Middle-earth: Shadow of War on its release date. CODEX collaborated with STEAMPUNKS on at least one game which used Denuvo DRM, South Park: The Fractured But Whole, which they released under the name "CODEPUNKS". In February 2018 CODEX began releasing cracked copies of games from the Microsoft Windows Store. In mid-2018 CODEX began releasing cracked copies of games featuring the latest versions of Denuvo DRM, including updated versions of Assassin's Creed Origins and Far Cry 5, both of which used Uplay licensing DRM and contained additional anti-modification and anti-debugging code through the use of VMProtect. On February 1, 2019, CODEX published a cracked copy of Resident Evil 2, which used Denuvo DRM, 7 days after the worldwide commercial release of the game. On June 27, CODEX released a crack for Star Wars Battlefront 2, about 527 days after its commercial release. On October 29, 2019 they published a cracked copy of Borderlands 3, another game distributed with Denuvo DRM, 46 days after release.
In late 2019, a crack developed by CODEX for Need for Speed: Heat, which uses Denuvo DRM, was leaked online, likely through their network of testers. Normally, the final cracks published by CODEX made use of anti-debugging tools like VMProtect or Themida, to impede reverse engineering efforts. This unfinished crack was not similarly protected. Subsequently, CODEX did not release any cracks for games using Denuvo DRM until June 2020, when they released cracked copies Team Sonic Racing, Trials of Mana, The Quiet Man, and an updated version of Far Cry: New Dawn.
CONSPIR4CY (releasing mostly as CPY) is a warez group founded in 1999 in Italy. They rose in notoriety after releasing Rise of the Tomb Raider and Inside in August 2016 under the name of CONSPIR4CY, though they resumed using the 'CPY' tag shortly thereafter with the release of their cracked copy of Doom in September 2016. They became the first group to create proper cracks for games protected by the third iteration of Denuvo DRM software.
They cracked Resident Evil 7: Biohazard only five days after its release, at the time the shortest amount of time taken to develop a crack for a Denuvo DRM-protected game. They also cracked Mass Effect: Andromeda, only ten days after its release. In July 2017 the warez group SKIDROW criticized the methods used by CONSPIR4CY to crack games using Denuvo DRM. In early 2018, CPY released cracked copies of Assassin's Creed Origins and Far Cry 5, which were compiled with the most recent version of Denuvo DRM, and had additional anti-modification and anti-debugging features through the use of VMProtect software and EasyAntiCheat. In November 2018 CPY released cracks for HITMAN 2, Assassin's Creed Odyssey, A Way Out, Shadow of the Tomb Raider, Pro Evolution Soccer 2019, FIFA 19 - all of which featured the latest version of Denuvo DRM, with some using additional custom DRM or off the shelf DRM such as EACore and VMProtect. In December 2018, CPY published a cracked copy of Just Cause 4, which used the latest version of Denuvo DRM, on the day after its release. They also released a crack for Battlefield V on December 22, days after its official release. In January 2019, CPY released cracked copies of Ace Combat 7, Mutant Year Zero, and Strange Brigade, as well as the first episode of Life Is Strange 2 (titled "Roads") - all 4 titles using the latest versions of Denuvo DRM.
In February 2019, CPY released Metro Exodus, which used the latest version of Denuvo DRM available, within 5 days of its release, as well as the second episode of Life Is Strange 2, titled "Rules". In September 2019, CPY published a cracked copy of the game Octopath Traveler, 93 days after its release. In November 2019, they released a cracked copy of Heavy Rain that featured the latest version of Denuvo DRM.
One of the most prolific warez groups active from 1998 to 2006. Their dissolution has been described as the end of an era, and the current affiliation of ex-DEViANCE members is a reoccurring argument between groups. Describing members of a modern warez group as ex-DEViANCE became something of a joke within the warez scene.
DrinkOrDie (also known as DoD) members were targeted by law enforcement in raids stemming from Operation Buccaneer.
Released American Pie on the Internet 3 months before its theatrical release. They branded their releases with a digital watermark of the letter "Z" which appeared in the corner of the frame. The bootleggers were associated with a web site in Argentina devoted to Quake.
FAiRLiGHT (releasing cracked games as FLT) is one of the oldest groups in warez scene, founded in 1987. As of 2017 the group seemingly focuses on demos and art, with their most recent release of cracked software in December 2016. FAiRLiGHT members were apprehended in raids stemming from the law enforcement Operation Fastlink.
Hoodlum (also known as HLM) mainly focused on cracking games which utilized digital rights management solutions offered by Safedisc and Securom. They were targeted as part of the Operation Site Down raids in 2005. In July 2018, some group using the HOODLUM name resumed releasing unauthorized copies of games.
The Dream Team (also known as "TDT") were the first warez group on the IBM PC to introduce intros or "crack'tros" to their game releases. It was one of the first IBM PC groups founded 1988 in Sweden and run by Hard Core or also known as HC/TDT.
The Humble Guys (also known as THG) were the first warez group to make use of NFO files to document their releases.
Founded in late 2006, HATRED was very active during 2006 to 2007. ViTALiTY has claimed that HATRED were former members of DEViANCE. Some of their major releases included Rainbow Six: Vegas and Resident Evil 4. Their last release was in August 2008.
International Network of Crackers (also known as INC) was one of the premier cracking/releasing warez groups for the IBM PC during the late 1980s and early 1990s. The majority of their releases during 1993 were educational games for children. By early 1994, INC had completely disappeared from the warez scene.
Kalisto is a console warez group established in March 1998 which specializes in the release and distribution of PlayStation and PlayStation 2 ISO images, briefly moonlighting on the Dreamcast platform in mid-to-late 2000.
maVen were a film release group from October 2005 until the summer of 2006. Releases from maVen stopped when the FBI caught Gérémi Adam, one of its key members. The 27-year-old Montreal resident has been sentenced to two and a half months in prison and was also ordered to complete 100 hours of community service. He pleaded guilty to distributing two major motion pictures: Invincible and How to Eat Fried Worms After the bust, releases ceased and another group called maVenssupplieR immediately took up the slack. In April 2010, the 28-year-old Gérémi Adam died of a drug overdose at the Pointe-aux-Trembles home he shared with his girlfriend, Cynthia Laporte.
Myth was a warez group, focused on cracking and ripping PC games. Besides ripped games, the group also released trainers and cracked updates for games.
PARADOX (also known as PDX) was founded in 1989, mainly cracking games for the Amiga. They went on to crack software for the Windows operating system and other consoles. They were one of the earliest groups to successfully crack Windows Vista, which was supposed to be a difficult task based on changes Microsoft had made to the activation scheme for the software.
The Pirates With Attitudes (also known as PWA) were a major international warez release group from 1992 until 2000. The group was formed by two former INC members known by the pseudonyms Orion and Bar Manager. PWA members were the subjects of law enforcement raids after the passing of the No Electronic Theft or "NET" Act.[non-primary source needed]
Project X exclusively released games for the Xbox. In 2004, Project X was named as one of six groups targeted as part of Operation Fastlink by the United States Department of Justice.[non-primary source needed]
PROPHET is a subgroup of or otherwise affiliated in some way with RELOADED, whose cracks they re-use in releasing multi-language versions of games. They also tend to release copies containing the latest game content such as DLCs. These are often stylized as MULTi. For example, MULTi7 meaning the release is a copy containing 7 languages - usually some combination of English, Spanish, French, German, Russian, Polish, Czech, Dutch, Italian, Portuguese, or some other European language.
Several verses of the rap song Hackers and the Crackers by Zearle are devoted to the group Radium. In 2004, evidence was presented that some of the system sound files included with the Microsoft Windows XP operating system, such as WMPAUD1.WAV, were authored using an unlicensed version of Sound Forge which was supplied by Radium.
Razor 1911 (also known as RZR and RazorDOX) was founded in 1984 in Montréal by "SM". In 1985 its primary bulletin board system was based in Norway. The group's main focus was to crack software for the Commodore 64 personal computer, but they also released Amiga and the IBM PC software. They were subjects of raids in Operation Buccaneer and Operation Fastlink.
The group made a comeback in June 2006, and since then has cracked modern copy protection schemes such as Rockstar Games Social Club, Ubisoft's persistent Internet connection requiring DRM, and Battle.NET. In March 2012, Razor1911 announced that their tester and coder DYCUS, who had an active role in making trainers and testing the group's releases, had died of cancer. Since then, the group has seldom released cracked games, focusing on DRM-free titles from GOG.com, as well as games for Linux and macOS.
RELOADED (also known as RLD!) was founded in June 2004. Their founders are believed to be ex-DEViANCE members, though their rival group HOODLUM claimed in December 2004 that none of DEViANCE's previous leaders had never been in RELOADED. The group has cracked several modern protection schemes like SecuROM 8, Blizzard's Battle.NET, and Arxan Anti-Tamper.
REVOLT gained popularity for creating solutions for cracked games to have working multiplayer features, and later for cracks of games using Denuvo DRM which were released by its founder. REVOLT was founded by a Bulgarian teenager, who used the online handle Voksi. In July 2018 the REVOLT website began redirecting to the website of the Bulgarian Ministry of the Interior. The same month, Voksi, then in his twenties, reported having been raided by Bulgarian law enforcement in response to a complaint filed by Denuvo parent company Irdeto. In comments made to media organisation TorrentFreak, Voksi alleged that "five or six officers, including two from Bulgaria's General Directorate for Combatting Organized Crime (GDBOB) and others from a local police station" entered his home and seized personal computing equipment.
Risciso (stylized as RISCISO) was an online warez group, founded in approximately 1993, dedicated to distributing newly released copyrighted software, games and movies.
SKIDROW is a well-known cracking group originally formed in 1990, cracking games for the Amiga platform, and having used the motto "Twice the Fun - Double the Trouble!" since then. A piece of cracktro software released by SKIDROW in 1992 with the game 10 Pinball Fantasies contained a complete list of their membership at the time. The most recent incarnation of SKIDROW began releasing unauthorized copies of games in June 2007, when they announced their return to cracking software. They were the first scene group to crack the version of Ubisoft's Uplay DRM which required players to have a persistent Internet connection to Ubisoft's licensing servers, first in Assassin's Creed II and then in Prince of Persia: The Forgotten Sands.
The group has released cracks for Denuvo Anti-Tamper protected games, Yesterday Origins and Deus Ex: Mankind Divided - A Criminal Past. It is believed the former had a bad implementation of Denuvo which made it easier to reverse engineer, mostly due to a lack of support from Denuvo for protecting games written in C# and specifically games using the Unity game engine, with this lack of support having been previously demonstrated by an anonymous independent cracker having developed a crack for Syberia 3, which also used Unity. The crack for the latter was actually determined to be a modified executable file from the game Deus Ex: Breach, a free game which did not incorporate Denuvo's software, released by the same developers and utilizing the same engine, which had been modified slightly to load the assets from Deus Ex: Mankind Divided. A plurality of SKIDROW's current releases are cracked versions of games that make use of Steam licensing.
In July 2017, in a statement released to commemorate their 10th consecutive year of releases since re-emerging in the PC game cracking scene, SKIDROW made cryptic remarks that the techniques used by CONSPIR4CY, STEAMPUNKS, and members of the Steam Underground warez forum to crack modern copy protections are not proper. These criticisms were themselves criticized on the web, as SKIDROW's apparent standards for a proper crack would seemingly disqualify both their most notable crack of Ubisoft's persistent online connection requiring DRM, which they emulated, and their most recent notable release of a Denuvo-protected game, which they cracked by modifying the executable from another game.
While not precisely a group, the community centered around the Steam Underground web forum and its members have been a notable source of warez development, releases, tools, tutorials, discussions, and information pertinent to other groups since at least 2008. The forum has both Russian and English language boards, and is the home to a number of projects primarily focused on cracking, emulating, and otherwise extending the capabilities of Steam and games released on Steam. Games on other platforms may also be discussed on their own board.
The Steam Underground forums are auxiliary to the warez scene, however the formal and informal collaboration between its users arguably constitutes a warez group. Members of Steam Underground have individually and collectively cracked games featuring DRM schemes such as the version of Ubisoft's Uplay which required players to maintain a persistent Internet connection to their licensing servers, Steam Custom Executable Generation, Arxan Anti-Tamper, Denuvo Anti-Tamper, and more - both generic digital distribution licensing schemes as well as custom protection, such as the copy protection triggers implemented by game developer Croteam in The Talos Principle and their Serious Sam franchise. Tools and techniques released on the forums have been used to make multiplayer game modes accessible in cracked copies of games, usually enabling pirates to play with other pirates. The cracker known as Baldman released the vast majority of his cracks for Denuvo-protected games on Steam Underground. A Bulgarian hacker known as Voksi used the Steam Underground forums as a point of distribution for cracks of games with advanced virtual machines, such as Denuvo. In early 2018, Voksi, in collaboration with another Steam Underground user and with material support from a member of Chinese cracking group 3DM, began releasing cracks for previously uncracked games and updated builds of titles which utilized Denuvo DRM. Voksi alleged in July 2018, after his personal site began redirecting to a Bulgarian government site, that he was raided by Bulgarian law enforcement at the behest of Denuvo's parent company. This parent company claimed responsibility for the law enforcement inquiry into Voksi in a press release.
The forum and its members have often been referenced as some variation of "the Russian site/forum" or directly by name by warez scene groups in statements which mention the site. At least one prominent member of the forum has been in contact with warez scene release group members, as they published several non-public cracks for The Sims 4 which they attributed to tools or methods obtained from the cracking group RELOADED. This individual was the given access or knowledge related to EA's Origin licensing scheme and DRM, as they began to release their own cracks for updated versions of The Sims 4 based on the same cracking technique.
Notable users of the Scene Underground forum include various individuals who have cracked Denuvo DRM: Baldman, Voksi, DeltaT, FCKDRM (not to be confused with the anti-DRM activism campaign begun by GOG.com), and C0000005 (a former CODEX member, also known as EMPRESS). Other notable members are syahmixp (creator of SmartSteamEmu), UberPsyX (author of the kernel mode driver used by Voksi to crack Denuvo games), and Mr_Goldberg (creator of an emulator for Steamworks multiplayer to add LAN-based multiplayer functionality to games, as well as having developed cracks for games using Arxan and Rockstar Social Club DRM).
STEAMPUNKS released unauthorized copies of games which utilized Denuvo digital rights management solutions in 2017, with their first releases being copies of Dishonored 2, ADR1FT, Planet Coaster, and ABZU. Releases by STEAMPUNKS include a license generator which creates a valid hardware ID-based license file. These licenses appear to be identical to those generated by the web-based activation servers operated by Denuvo, and they do not trigger Denuvo's DRM copy protection. This method attracted some attention upon its debut, while license generators and "keymakers" were fairly common in commercial software piracy, they had fallen out of use in cracking games as most games moved to the license management capabilities provided by Steam and other digital distribution platforms. One negative reaction to STEAMPUNKS' license maker came from the warez group SKIDROW in a statement from the group released in July 2017. In late September 2017, STEAMPUNKS became the first warez group to release cracked copies of Denuvo DRM-protected games within 24 hours of their commercial availability, releasing both Total War: Warhammer II and FIFA 18 on the same day they were made available for consumers. STEAMPUNKS collaborated with CODEX to crack South Park: The Fractured But Whole upon its release, with the cracked release appearing under the portmanteau group name "CODEPUNKS". Following this and one other collaborative release, STEAMPUNKS became inactive, while CODEX continued to publish cracked versions of games. At least one of STEAMPUNKS' crackers was originally a member of X-FORCE (known for their Adobe software keygens), and at least one other member of STEAMPUNKS would become a member of CODEX after the group became inactive.
Superior Art Creations (SAC) is an underground artscene group which caters primarily to, and is well known within, the warez scene.
Tristar and Red Sector, Inc. (also known as TRSI) began as an alliance between two warez groups: Tristar and Red Sector Incorporated. They were formed in 1990 as a cooperative Commodore 64 demo coding and cracking group. TRSI migrated from the Commodore 64 release platform to the Amiga and IBM-PC, and eventually branched off into the console gaming scene before finally disbanding their warez division. In late 2003, TRSI became inactive and remains so today.[third-party source needed]
The United Software Association (also known as USA) was a prominent IBM PC games and applications warez group during the 1990s. USA formed an alliance with the PC warez division of Fairlight which was known as "USA/FLT". In late January 1992, several members of USA were arrested by the United States Secret Service and the Farmington Hills, Michigan police for credit card fraud.
VACE was founded in September 2003, and focused on cracking and ripping PC games. Besides ripped games, the group also releases trainers.
ViTALiTY (also known as VTY) was founded in May 2005. It has been suggested they were former members of DEViANCE. The group was considered blacklisted by many in the warez scene in October 2007, something ViTALiTY claims was orchestrated by rival groups RELOADED and FAiRLiGHT, though the latter claim they were against it. ViTALiTY was accused of either reporting or threatening to report members of other groups to the FBI, though ViTALiTY claimed a senior member of RELOADED threatened to do the same to them. Their latest release was Frontlines Fuelwar.
This movie is not in theatres, only in WP by EViLiSO.[self-published source]
Eviliso digitally brands its copies with a letter Z that appears in the corner of the screen.
Rabid Neurosis was founded on June 6, 1996 to be exact[self-published source]