A regular player has started using an aimbot

[Reporting]

I recently noticed a hacker and recorded a demo -- although it is an external link since it's too large to post here.

Looking into the player, I realized that although I didn't recognize the screenname at the time, the player is actually a regular on the SourceOP 2fort server. The player is "I am Bread!"; he has recently started using a soft aimbot on what seems to be his regular account (as opposed to an alt). As ill advised or brash as this may be, it does sometimes occur. Most players recognize his name as he has been playing on SourceOP for some time.

I'm positive he is using a soft aimbot. He most likely uses it with an alternate mouse button in between regular shots (usually wide misses), and the flicks aren't as large as the more obvious aimbots but it definitely doesn't look right when spectating -- it seems to usually return the mouse to the spot it was before activated so it makes misses look like headshots and sometimes bodyshots. There has been some loose speculation in the server chat that he is hacking, but he has been relatively unnoticed for at least a few weeks now since he decided to start cheating.

I was advised to use mediafire when the files are too large - Here is the link to a demo that I believe provides evidence: http://www.mediafire.com/file/2j90sn756w4j145/iambread5.dem/file - It is over 1mb zipped so I couldn't attach it here.

Please ignore the minute and a half of normal shots which are misses, I believe the anomalies occur at the following times in the demo:

101:75 left, kills player named orb with a definite anomaly
101:10 left, possible anomaly
100:12 left, second definite anomaly

When he is hacking the aimbot can be observed quite easily, but please be advised - he does play without cheating some too, sometimes using non-hitscan classes, and he does take a fair amount of manual shots while cheating with the aimbot. He also isn't hiding - he is using his regular screenname often and as mentioned, has been a regular for quite a long time.

[Yossef]

Thank you for your report. A few things;
- We need you to specify when was this demo recorded (dates, time, etc)
- also, we need you to post the Steam ID64, 32, etc.
- we have 2 2fort server, it'd help alot if you specify which one is it, you can provide the IP address as well.

Thanks

[Reporting]

No problem, the demo was recorded on 9/16/2018 finishing at 7:47pm EST, the server is 67.228.59.146:27015

The player is cheating on his main account:

Steam ID: STEAM_0:0:47372793
Steam3: [U:1:94745586]
Community ID: 76561198055011314

SteamID URL: https://steamid.uk/profile/76561198055011314
Community URL: https://steamcommunity.com/profiles/76561198055011314

Please let me know if you need anything else - this player uses this on a near daily basis so I am really hoping to shed some light on this aimbot. Thanks for taking a look.

[Yossef]

We will keep an eye on him and see for ourselves. Nevertheless thanks for the report.

[Reporting]

Did you review the demo? Do you not agree that it provides evidence of an aimbot?

[Yossef]

I reviewed the demo, couple of times to be sure, and it's inconclusive.

[Reporting]

Okay, when I view it I see misses that are registered as kills, there are aimbots that do exactly that. It's pretty conclusive to me and not a one off thing (this can be seen repeatedly), and other players have started to notice too... there was speculation just today that he was using an aimbot.

Either way, I hope you guys take the time to spec him and see for yourself, having a regular player use an aimbot on the server on a daily basis isn't good for anybody.

[Yossef]

if you suspect of him hacking again, record it and post it here. Maybe you can spot a better and more conclusive demo.

[Reporting]

If you're looking for obvious 45 degree snaps you won't find it with this aimbot, you'll just see near misses that register as hits like the demo shows (I can't see how you can say that those weren't suspicious unless you are seeing something way different than me -- the demo clearly shows shots that were a good 4-5 head widths away from the player registering as bodyshots and headshots at the exact times listed). People talk about him cheating on a fairly regular basis - check the chat logs.

He takes a shot with the aimbot trigger and as long as it's close it moves the mouse, sends a click, and moves it back to where he took the shot, making it look like a miss was a hit. Easy to write and doesn't include any hooks or anything that VAC usually looks for, I was hoping you would be familiar with this type of soft aimbot -- you have to know what to look for but you see it again and again with this player lately. Maybe you see his crosshair actually touching the player he hits on those two times recorded and listed in the demo -- for me he never gets that close, it's a pretty conclusive soft aimbot with the setting to return the mouse to the original position turned on.

I think I've spent enough time on it but good luck getting to the bottom of it if you guys decide to take any real time and spectate him for a while and see. Otherwise people will just have to live with a regular using his main account to cheat right under your nose -- happens on every server from time to time.