# New nasty chinese bot detected

**URL:** <https://forums.eveonline.com/t/new-nasty-chinese-bot-detected/100581>\
**Category:** General Discussion\
**Created:** [August 25, 2018, 10:09am UTC](https://forums.eveonline.com/t/new-nasty-chinese-bot-detected/100581 "2018-08-25T10:09:53Z")\
**Posts on this page:** 14\
**Page:** 1

<div class="post-metadata">

**Author:** ![Beatrix\_Ski](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/beatrix_ski/32/256857_2.png) [@Beatrix\_Ski](https://forums.eveonline.com/u/Beatrix_Ski)\
**Post date:** [August 25, 2018, 10:09am UTC](https://forums.eveonline.com/t/new-nasty-chinese-bot-detected/100581/1 "2018-08-25T10:09:53Z")

</div>

o/

So I was exploring around in Insmother in my Astero, and came into a ratting-system. One guy in local posted my name, the a link with Chinese text. Out of curiosity, i pressed the link, and it was a link with my ship, and all my fittings.

[first encounter](https://postimg.cc/image/klukw32xp/)

I haven’t lost any ships with this fitting before, and i cloaked up immediately after jump on every gate prior, so i found it weird that he knew my fitting this fast.

I decided to investigate this further, so i sent my alt to the same system. To make sure not to be scanned, i went with an instantly warping interceptor. This way there’s no chance for anyone to get a lock and scan off when i’m at the. Even if theres a bot doing it. And what happened?

[Second encounter](https://postimg.cc/image/iju3ho4wt/)

Now we have had allot of bot’s over the years, and while i hate them, and wish ccp would do more to beat them, they are still just automations of regular game mechanics.

This however is a game-changer, if someone can extract the fitting of you’r ship as soon as you enter a system, PvP is as good as dead.

It’s lucky that the bot was programmed to post this in local, instead of any other channel, so it could be detected. But if people are using this kind of software, i might aswel find another game to play.

Cheers o/

---

<div class="post-metadata">

**Author:** ![Beast\_of\_Revelations](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/beast_of_revelations/32/413187_2.png) [@Beast\_of\_Revelations](https://forums.eveonline.com/u/Beast_of_Revelations)\
**Post date:** [August 25, 2018, 10:19am UTC](https://forums.eveonline.com/t/new-nasty-chinese-bot-detected/100581/2 "2018-08-25T10:19:10Z")

</div>

If true, excellent find! You should send all this info to Eve and report it, and then, perhaps more importantly, post the entire thing to Reddit.

If everything is true as you say, it seems to be some kind of exploit, and CCP has been careless by transmitting information to a game client before it should have or know that information.

---

<div class="post-metadata">

**Author:** ![Beatrix\_Ski](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/beatrix_ski/32/256857_2.png) [@Beatrix\_Ski](https://forums.eveonline.com/u/Beatrix_Ski)\
**Post date:** [August 25, 2018, 10:25am UTC](https://forums.eveonline.com/t/new-nasty-chinese-bot-detected/100581/3 "2018-08-25T10:25:52Z")

</div>

Yeah thx.

I’m no programmer, but as far as i understand the game-mechanics, getting this information should be impossible. The player posting in local was also in a VNI over 1000 km off the gate, so how he could get a ships-can off is beyond me.

I guess a reddit post will be in order too XD

o7

---

<div class="post-metadata">

**Author:** ![Ramona\_McCandless](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/ramona_mccandless/32/468438_2.png) [@Ramona\_McCandless](https://forums.eveonline.com/u/Ramona_McCandless)\
**Post date:** [August 25, 2018, 10:29am UTC](https://forums.eveonline.com/t/new-nasty-chinese-bot-detected/100581/4 "2018-08-25T10:29:55Z")

</div>

How long were you in system either time before this happened?

---

<div class="post-metadata">

**Author:** ![Whitehound](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/whitehound/32/59604_2.png) [@Whitehound](https://forums.eveonline.com/u/Whitehound)\
**Post date:** [August 25, 2018, 10:40am UTC](https://forums.eveonline.com/t/new-nasty-chinese-bot-detected/100581/5 "2018-08-25T10:40:39Z")

</div>

While this sounds all very interesting do I wonder if this really is what you think it is.

It could be it’s just some game link such as \<url=showinfo:587\>This is Rifter\</url\> which then shows you your own fitting, and only makes you think they know what you’ve fitted.

Secondly, if it really was as you say, why would a bot link this openly into local and not use a private chat instead?

Not saying it is, but they could just be f’cking with you.

---

<div class="post-metadata">

**Author:** ![Beatrix\_Ski](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/beatrix_ski/32/256857_2.png) [@Beatrix\_Ski](https://forums.eveonline.com/u/Beatrix_Ski)\
**Post date:** [August 25, 2018, 10:51am UTC](https://forums.eveonline.com/t/new-nasty-chinese-bot-detected/100581/6 "2018-08-25T10:51:21Z")

</div>

@Whitehound Hmm, interesting, you might be right.

I have no clue why they would use local instead of any other channel, maybe other bot’s need to have local open, or just to show that “i see you, not worth trying”

If they are still there after downtime, i will try jumping in with two characters, and see if i can get the fitting from one character via local to anther.

@Ramona_McCandless

A few seconds

---

<div class="post-metadata">

**Author:** ![Ramona\_McCandless](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/ramona_mccandless/32/468438_2.png) [@Ramona\_McCandless](https://forums.eveonline.com/u/Ramona_McCandless)\
**Post date:** [August 25, 2018, 10:53am UTC](https://forums.eveonline.com/t/new-nasty-chinese-bot-detected/100581/7 "2018-08-25T10:53:59Z")

</div>

Hmm does it show cargo or just fit?

---

<div class="post-metadata">

**Author:** ![Beatrix\_Ski](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/beatrix_ski/32/256857_2.png) [@Beatrix\_Ski](https://forums.eveonline.com/u/Beatrix_Ski)\
**Post date:** [August 25, 2018, 10:54am UTC](https://forums.eveonline.com/t/new-nasty-chinese-bot-detected/100581/8 "2018-08-25T10:54:22Z")

</div>

Fit only

---

<div class="post-metadata">

**Author:** ![Whitehound](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/whitehound/32/59604_2.png) [@Whitehound](https://forums.eveonline.com/u/Whitehound)\
**Post date:** [August 25, 2018, 10:57am UTC](https://forums.eveonline.com/t/new-nasty-chinese-bot-detected/100581/9 "2018-08-25T10:57:12Z")

</div>

> [@Beatrix\_Ski](#):
>
> Fit only

Record the time of entry and the time the message pops up. Would be interesting to see if it’s always close to the same delay.

---

<div class="post-metadata">

**Author:** ![Beatrix\_Ski](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/beatrix_ski/32/256857_2.png) [@Beatrix\_Ski](https://forums.eveonline.com/u/Beatrix_Ski)\
**Post date:** [August 25, 2018, 11:01am UTC](https://forums.eveonline.com/t/new-nasty-chinese-bot-detected/100581/10 "2018-08-25T11:01:38Z")

</div>

Hmm might be that you are right Whitehound!

I tried re-linking it to my alt, and for her it came up as a regular ship link (ship only, no fitting)

Anyway thx for the help figuring this out 😃

---

<div class="post-metadata">

**Author:** ![Uriel\_the\_Flame](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/uriel_the_flame/32/490165_2.png) [@Uriel\_the\_Flame](https://forums.eveonline.com/u/Uriel_the_Flame)\
**Post date:** [August 25, 2018, 11:10am UTC](https://forums.eveonline.com/t/new-nasty-chinese-bot-detected/100581/11 "2018-08-25T11:10:04Z")

</div>

You can also check your chat logs to confirm what links you’ve received earlier.

---

<div class="post-metadata">

**Author:** ![Whitehound](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/whitehound/32/59604_2.png) [@Whitehound](https://forums.eveonline.com/u/Whitehound)\
**Post date:** [August 25, 2018, 11:19am UTC](https://forums.eveonline.com/t/new-nasty-chinese-bot-detected/100581/12 "2018-08-25T11:19:01Z")

</div>

> [@Beatrix\_Ski](#):
>
> Hmm might be that you are right Whitehound!
> 
> I tried re-linking it to my alt, and for her it came up as a regular ship link (ship only, no fitting)
> 
> Anyway thx for the help figuring this out 😃

Now if you could post the link in plain text form, then we can all start using it. 😉

---

<div class="post-metadata">

**Author:** ![ISD\_Buldath](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/isd_buldath/32/381437_2.png) [@ISD\_Buldath](https://forums.eveonline.com/u/ISD_Buldath)\
**Post date:** [August 25, 2018, 2:19pm UTC](https://forums.eveonline.com/t/new-nasty-chinese-bot-detected/100581/13 "2018-08-25T14:19:48Z")

</div>

Please create a Support ticket and forward all of the information you have gathered to GM’s. I Also recommend you forward a Mail to [security@ccpgames.com](mailto:security@ccpgames.com) so that The Security Team can also look into this. Inform them of the ticket number so they can pull it and work on it.

I will go ahead and close this, as this content is not welcome on the forums as it discusses Illegal Botting and a possible Exploit. ( That being linking your fitting when they obviously should not be able too. )

---

<div class="post-metadata">

**Author:** ![ISD\_Buldath](https://sea1.discourse-cdn.com/eveonline/user_avatar/forums.eveonline.com/isd_buldath/32/381437_2.png) [@ISD\_Buldath](https://forums.eveonline.com/u/ISD_Buldath)\
**Post date:** [August 25, 2018, 2:19pm UTC](https://forums.eveonline.com/t/new-nasty-chinese-bot-detected/100581/14 "2018-08-25T14:19:52Z")

</div>


