Genshin Impact devs are "currently working on" reported ransomware exploit

Genshin Impact association questions
(Image credit: Hoyoverse)

Genshin Impact developer Hoyoverse is aware of a reported ransomware exploit tied to the game's anti-cheat and is "currently working on" a fix. 

The new ransomware is said to co-opt the kernel-level anti-cheat software HoYoverse uses for Genshin Impact, using it to kill or bypass protections and antivirus processes to mass-deploy ransomware. Since Genshin Impact 3.0 just kicked off, it's no surprise that malicious programmers have set their sights on the popular game. 

GamesRadar reached out to HoYoverse for comment regarding this new exploit and was told that the devs are still working to figure out the best solution: "The HoYoverse team takes information security very seriously," a PR representative reads. "We're currently working on this case, and will find a solution as soon as possible to safeguard players' safety and stop potential abuse of the anti-cheat function. We will keep you posted once we have further progress."

Trend Micro first drew attention to the new exploit, reporting that "organizations and security teams should be careful" because of "the ease of obtaining" the driver involved and how easily it can then bypass your computer's privileges, spreading ransomware and/or malware like wildfire. 

This is reportedly due to a specific driver, mhyprot2.sys (a relic from Hoyoverse's days as Mihoyo), being repurposed by bad actors. Consequently, as long as this driver is on your PC, you don't even need to install all of Genshin Impact to be vulnerable to this exploit. 

Popular PC games like Genshin Impact are ideal targets for malware, as it's relatively easy to bait players into downloading something under the guise of an update, only to spread malware to their devices. Kernel-level anti-cheat systems, which aren't inherently unsafe and are generally much more effective at stopping cheaters than user-level counterparts, are also particularly susceptible to targeted security attacks like this due to the control they have over system operations.  

This Genshin Impact exploit seems to be isolated for the time being, but as ever, beware of suspicious downloads and ensure you have solid antivirus software on your PC. 

See what Genshin Impact codes you can claim right now with our updated list.

CATEGORIES
Alyssa Mercante

Alyssa Mercante is an editor and features writer at GamesRadar based out of Brooklyn, NY. Prior to entering the industry, she got her Masters's degree in Modern and Contemporary Literature at Newcastle University with a dissertation focusing on contemporary indie games. She spends most of her time playing competitive shooters and in-depth RPGs and was recently on a PAX Panel about the best bars in video games. In her spare time Alyssa rescues cats, practices her Italian, and plays soccer.

Read more
Venom, Spider-Man, Peni Parker, Scarlet Witch, Magneto, and Storm pose in artwork for Marvel Rivals
Marvel Rivals devs lift bans on players mistakenly banned for cheating: "We do not and will not ban players who are playing fairly"
Genshin Impact codes
All Genshin Impact codes (Mar 2025) and how to redeem them
Invisible Woman in her Marvel Rivals character reveal trailer, surrounded by projectiles
Marvel Rivals bans popular third-party plugin: "We deem this program as cheating," but "fear not" if you've been using it
Venom, Spider-Man, Peni Parker, Scarlet Witch, Magneto, and Storm pose in artwork for Marvel Rivals
As fed up Marvel Rivals fans modify game files to disable mouse acceleration, NetEase "kindly" advises against doing so as "it may lead to unexpected issues"
CJ on a motorbike firing a submachine gun with one hand
The leaked GTA San Andreas source code is apparently fake and contains ransomware, so please don't download it
Final Fantasy 14 patch 6.4 The Dark Throne
As the Final Fantasy 14 devs "continue to take a firm stance" against mods that can enable harassment, Yoshi-P says improvements are starting in patch 7.2
Latest in Adventure
Pokemon Go players brace for the worst as Niantic is sold off for $3.5 billion: "This game is entering its death knell"
Pokemon Go player trying to catch a Croagunk
Pokemon Go developer Niantic is being bought for $3.5 billion, CEO says it'll help its games be "'forever games' that will endure for future generations"
Lapras seen in the Pokemon anime.
Former Pokemon world champ uses a "stupid strategy" that "should never work" to transform a Lapras into an OHKO machine so powerful it can even take out enemies in alternate dimensions
Minecraft Diamond Armor
Minecraft Pocket Edition got its name because one of its devs was a big "Nintendo nerd" who wanted to pay homage to the Game Boy Pocket
an ai chatbot plays a modded verion of pokemon red and jumps down a ledge to talk to an npc
An AI's mission to 'teach' itself Pokemon Red is going as well as you think - after escaping Cerulean City after tens of hours, it went right on back
Pokemon Legends Z-A screenshot showing Mega Charizard
Pokemon Legends Z-A's visuals aren't "great" say former Nintendo marketing leads, but hope Switch 2 could allow Game Freak to "go back to the drawing board" and add more detail to future RPGs
Latest in News
Overwatch 2
My hopes for an Overwatch anime or Diablo horror movie are going strong as Blizzard president points out "we are Blizzard Entertainment, and not simply Blizzard Games"
The New Thunderbolts leaping into action
Marvel's New Thunderbolts* comic steals the MCU's asterisk, and the reason why is just as big of a mystery
Pokemon Go players brace for the worst as Niantic is sold off for $3.5 billion: "This game is entering its death knell"
Stamp PSP
A 16-year-old pitch for a newly discovered first-party PSP game has me mourning the death of PlayStation's Japan Studio all over again
Astarion from Baldur's Gate 3
Baldur's Gate 3 Astarion actor Neil Newbon says he "got rid of" agents who deliberately kept him away from video game gigs: "They just didn't want me to do it"
Mass Effect
Jennifer Hale says she didn't see a single line as Mass Effect's Commander Shepard until it was time to record: "It was all cold reading on the spot"