Writes directly to the firmware of storage drives (NVMe/SSD/HDD), network adapters (NIC), and motherboard SMBIOS tables. Changes survive OS reinstalls, BIOS updates, and drive formatting.
In 2023, a multinational cybercrime group known as "The Ghost Riders" was uncovered using a permanent spoofing tool (allegedly based on VOX Solutions code) to hijack cryptocurrency accounts. The group would spoof the IMEI of victims’ phones to match a controlled device, intercept 2FA codes from Google Authenticator and SMS, and drain wallets—all while the victim’s phone remained untouched. VOX Solutions Permanent Spoofer
Based on the information available, "VOX Solutions Permanent Spoofer" appears to be a term conflating two very different technical worlds: a high-level telecom anti-fraud suite video game hardware ID (HWID) spoofing VOX Solutions Writes directly to the firmware of storage drives
Drivers operate at Ring-0 with randomized callbacks. No leftover registry artifacts, unloaded traces, or memory signatures detectable by AC integrity scans. The group would spoof the IMEI of victims’
VOX Solutions Permanent Spoofer Category: Hardware ID (HWID) Manipulation / Anti-Cheat Bypass Target OS: Windows 10/11 (64-bit)
| Anti-Cheat | Status | Notes | |------------|--------|-------| | Easy Anti-Cheat | ✅ Full | No detection in 14+ months | | BattlEye | ✅ Full | Requires reboot after spoof | | Vanguard | ⚠️ Limited | Use on secondary drive only | | FaceIT AC | ✅ Full | Supports anonymous mode | | Custom Kernel AC | ✅ Full | Tested on 20+ private ACs |