Getting Drophacked

Lillya·Feb 1, 2018·11 votes·2,407 views

So, i got DDOS( sorry for missleading you in the title) and its so obvious, but sadly I dont know who to report because it could be anyone. Me my duoQ and my support had multiple DC's but only when we were fighting. I just uploaded the most obvious example as a video. As you can see we both suddenly DC and had to stand still and were dead by the time we were back. I hope you can take further actions on this case and that this person gets a ban. I didnt know people actually do this and i never saw anyone do this before in my 4 years of playing this game.

Note: The Lulu is not my premade the jungler was.

22 Comments

OxyrottenFeb 1, 20181 votes

Were you and your duo on the same network?

It's very very unlikely that someone did what you think they did.

LillyaFeb 2, 20181 votes

i couldn’t belive it at first. no, we are no on the same network and the person next to me getting dropped isn’t my premade it is a random player my duoQ played jungle this game.

Ph03n1xb1rdFeb 1, 20181 votes

Are you sure that this "Drop hack" even exists?

I mean if Rito's developers know what they do (I highly doubt it), there should be no way for anyone to get your IP address for DDOS you or anything. And if they would "attack" the game server then it will cause crashes for EVERYBODY, not just one of the teams, making it practically not really useful. (And also, if they attack the server, it could identify the player and punish him)

Does anybody have more information about this?

LillyaFeb 2, 20181 votes

i know that it’s highly unlikely but it’s the first time i see somethingg like this and i must say it looked too damn obvious...

OxyrottenFeb 2, 20183 votes

{quoted}

Are you sure that this "Drop hack" even exists?

I mean if Rito's developers know what they do (I highly doubt it), there should be no way for anyone to get your IP address for DDOS you or anything. And if they would "attack" the game server then it will cause crashes for EVERYBODY, not just one of the teams, making it practically not really useful. (And also, if they attack the server, it could identify the player and punish him)

Does anybody have more information about this?

Your pretty much right, besides if someone was hacking the server to identify players or attack the server directly it would show in their history as statistical anomaly's that would get flagged (supposedly). That kind of attack would be very difficult to pull off and still remain under the radar (firewall, IDS/IPS, WAF/reverse proxy, data mining/analysis, etc), and it's not something you could do in a matter of minutes to effect a game anyway.

When people DoS a targeted player it's because they have pulled that person's IP, you don't see this low elo anyway because it's just not practical. For example Jensen was able to DoS players because high elo he had regular contact/communication opportunities with them outside league and was able to obtain IP that way. Low elo your not going to see the same players regularly so there's not point in going to the effort to identify and DoS a single player, or even a team.

More than likely it was some sort of server failure or regional ISP issue or something to that effect. Not going to say it can't be done, but the chances that someone would go to that effort for a single low elo game is extremely low. And the chance of it happening in the time table of a single game is extremely low (excluding the chance that they already have persistent access to the server, which in that case again would show in their history as repeated abuse).

Edit: Also looking at the video they don't seem to be playing as if they knew the alleged attack was taking place. Although the zil's s7 records are a bit higher than usual so that may point to abuse but I doubt it.

LillyaFeb 2, 20182 votes

you can see ori akwardly pinging behind me and lulu without having vision of us we would have been gone normally so to me it seems like someone knew...

I know what it means to DDOS someone and I know it’s fairly unlikely but you still have to consider thats it’s possible and if we talk about elo. This might be a silver account but that game was a low plat game if you check it on op.gg because this is a smurf, ofc this is still not high elo eksde.

OxyrottenFeb 2, 20181 votes

{quoted}

you can see ori akwardly pinging behind me and lulu without having vision of us we would have been gone normally so to me it seems like someone knew...

I know what it means to DDOS someone and I know it’s fairly unlikely but you still have to consider thats it’s possible and if we talk about elo. This might be a silver account but that game was a low plat game if you check it on op.gg because this is a smurf, ofc this is still not high elo eksde.

I mean that could be fairly easily explained though, she had just an opening and was moving botlane to gank. The zil does have an usual winrates on his s7 games so that could be something but it also could be nothing. I would submit a ticket to Riot for review.

LillyaFeb 2, 20181 votes

thank you for considering that this might actually be a DDOS attack, thats new <3

OxyrottenFeb 2, 20182 votes

{quoted}

thank you for considering that this might actually be a DDOS attack, thats new <3

This is actually what I do for a living (hacking/cybersecurity), and you kind of have to keep an open mind because part of the hacking game is thinking outside the box. Possibilities are always worth looking at, if it's there then you catch something new, if it's not there then you are at least a bit more knowledgeable about something or can look at things from a different angle.

Ph03n1xb1rdFeb 2, 20181 votes

Did you ever look at the structure of the LoL communication packets? Just for curiosity :)

OxyrottenFeb 2, 20181 votes

{quoted}

Did you ever look at the structure of the LoL communication packets? Just for curiosity :)

Yeah, there's not really anything readable. Which makes sense. I did a quick search and it looks like people have written analyzers for it, since it's a custom UDP protocol. It would be kind of interesting to take a dabble with it, I'll have to add it to the list of rainy day projects.

Ph03n1xb1rdFeb 2, 20181 votes

I was just thinking about what kind of authentication they do in their communication, a simple token or something...

It would be nice to send IP spoofed packets as another player :D

OxyrottenFeb 2, 20181 votes

{quoted}

I was just thinking about what kind of authentication they do in their communication, a simple token or something...

It would be nice to send IP spoofed packets as another player :D

Without knowing the details of how they handle sessions and authentication, I would guess that it would be more complicated than that. You would likely need to man in the middle that player in order to hijack their session/token/etc, so it would become a localized network attack requiring access to that specific players network. But I mean that's just a guess and it's probably possible just would need some research.

I could totally see some challengers doing it, having a friend take over an opponents champ and run it down mid etc. :P

Ph03n1xb1rdFeb 2, 20181 votes

Look, I didn't wanted to look offensive or anything, I just highly doubt that it is worth ANYBODY to hack the LoL servers (facing the LEGAL consequences) to get your IP address, and DoS you.

Did you use ANY kind of communication with your possible attacker besides LoL? Were you streaming, visiting a site he wrote in all chat, etc...? In that case it could be much more viable. As I said it's possible to DoS the server which could make RANDOM players gettin' dropped from game (even the attacker, actually most likely him, if they have a correct firewall or whatever), so with that you cant do precision attacks against anybody.

And sometimes I have connection problems, and as I saw a lot of other players, so I simply assume it's just server problem.

Eternal TormentFeb 2, 20181 votes

Drophacks exist but they arent called drophacks but DDoS attacks. As far as im informed.

LillyaFeb 2, 20181 votes

sadly i’m not able to change the title anymore.

OxyrottenFeb 2, 20181 votes

[{quoted}](name=Eternal Torment,realm=EUW,application-id=ZGEFLEUQ,discussion-id=HlQdszk6,comment-id=00010002,timestamp=2018-02-02T07:12:59.632+0000)

Drophacks exist but they arent called drophacks but DDoS attacks. As far as im informed.

Yeah DoS attacks. DDoS actually implies multiple attackers, but it's interchangeable since everyone just knows it as DDoS.

YerroFeverFeb 2, 20181 votes

In the past, I am sure lag hacks existed. I don't know about now but back in the day, I encountered them quite a bit.

Everyone on our team would lag when near specific players, like team fights would be fine if that person wasn't there but if they were there, 5 of us would lag out and get aced and then reconnect while dead. Or if we encountered them individually, a person would disconnect, die, then reconnect.

This was also before the new client and so the way the game worked back then may not be the same way it works now and Riot has made many improvements to stop third party programs from influencing the game.

LillyaFeb 2, 20181 votes

you have a good point and i also was pretty sure that this is not possible but after having this happening to me i have a pretty open mind about it

Great LadFeb 2, 20181 votes

I don't think you understand what the existence of such a hack implies or the technical flaws League would have to attain for this to be allowed.

Running a netstat clearly and immediately shows there's no communication between you and the players. Their IP's are never released. Unless you got their IP by them accessing a link or any other methods, then this won't be possible.

This was most likely something on Riot's servers that we can't explain.

If you really do care, then try to see the win-rate of these people.

Was any of them in their promos?

Either way, if such a hack existed, whoever made it is as smart to know not to give it free to people / sell it for change and they'd have a bigger impact.

Just highly unlikely.

Make a ticket.

lil kodaFeb 2, 20181 votes

everyone here questioning if a drop hack exists for league, when there is a very popular video of a jinx dropping his entire team and enemy team when they were about to lose, the jinx then just pushes mid and ends the game.