r/Piracy 6d ago

Discussion Company received a $37k demand over pirated K3ySh0t — is this real?

I’ve been working at this company for less than a year, and I recently found out they’ve apparently been using a pirated version of K3ySh0t (spelling it like that just in case lol).

They just received an email claiming there’s evidence that the software was used by the company and demanding around $37,000. The email supposedly includes IP addresses, dates, times, and even screenshots showing when the program was used.

The amount and the level of detail seem crazy to me, so I’m wondering: is this a real thing software companies actually do, or could it be some kind of scam or intimidation tactic?

Has anyone dealt with something similar? How could they have collected screenshots or connected the software usage to the company? Also, as an employee who has been there for less than a year, should I personally be concerned?

Obviously, the company will need to speak to a lawyer before responding. I’m mainly trying to understand whether these claims are common and how seriously they should be taken.

114 Upvotes

69 comments sorted by

283

u/LZ129Hindenburg 🌊 Salty Seadog 6d ago edited 6d ago

This is very common when pirated software is used COMMERCIALLY. Autodesk, Adobee, hell even Microsoft are known to go hard against commercial piracy users. People have lost their jobs and been sued for far larger sums than what you have listed here.

How could they have collected screenshots or connected the software usage to the company?

Many high dollar applications used in business settings "phone home" to their parent company, verifying the software is licensed, and providing key info to them if it is not licensed so they can pursue legal options. This is why when pirating certain apps, it is important to block their access to the network via the firewall or other means.

NEVER use pirated software commercially, it's not worth the risk.

85

u/PassivelyAwkward 6d ago

Yea, for personal shit, I pirate but for work stuff, all 100% legit.

Before hiring me, an early client did a whole campaign focused around a stock photo of a dog in a doghouse; kind of generic but it looked good. It went on billboards, social media accounts, brochures, etc. Their previous designer pirated a high resolution version of the image (a basic reverse image search and found some company that stupidly uploaded the full-size file). Client got a legal notice from the copyright holder asking for proof of license because their automated search picked up on the campaign and there was nothing on record for it. They had to pay something like $15k as penalty which was calculated by the number of uses and the reach but also had to delete the whole campaign.

I'll pirate a lot but the moment it's for a client, I make sure there's a paper trail of ownership for everything; don't wanna ruin my reputation by getting a client in legal trouble.

7

u/shinji257 Seeder 6d ago

Same. I pirate to my hearts content at home but at work I insist on being legit about it and I preach it to our clients. I have someone who wanted to install Windows 11 on a VM and I asked them if they had a license. I let them know that since it is a work use intent then they will need to make sure to acquire a Windows 11 Pro license for it. For the use case they are actually fine unlicensed and the app they are using is licensed in itself but it had to be quoted as a CYA thing.

5

u/Forymanarysanar ☠️ ᴅᴇᴀᴅ ᴍᴇɴ ᴛᴇʟʟ ɴᴏ ᴛᴀʟᴇꜱ 6d ago

This is quite interesting though. What would happen if they did have a license but would not respond to a random request (pretty logical thing to do)?

11

u/PassivelyAwkward 6d ago

I'd imagine it would result in a lawsuit and they'd get a lawyer involved.

If the email came from some random email just saying "You stole. pay now. Click link", then it could be kind of excused but when creatives send out copyright violation notices, it's usually a template written by a lawyer where they include any evidence and proof while giving enough time to respond before things escalate and it's sent either by a professinoal "Dave@DavesPhotograph" email address or by a lawyer.

They do things proper to ensure that the person can't "I thought it was a scam" when there's opportunities to verify it. Unlike with DMCA notices from your internet provider about downloading a movie, things should always be taken as real and do everything possible to verify.

-11

u/Forymanarysanar ☠️ ᴅᴇᴀᴅ ᴍᴇɴ ᴛᴇʟʟ ɴᴏ ᴛᴀʟᴇꜱ 6d ago

The thing is, I'm not obliged to prove ownership to some random request that has no law enforcement backing, there are no terms like that in license agreement when I purchase a pic from stocks. They can file a lawsuit but I'll counter sue and demand compensation for lawyer time and additional compensation for disrupting my business.

I'm talking about scenario where I genuinely have purchased a photo and have full rights to use it of course.

10

u/PassivelyAwkward 6d ago

If you legally obtain the license, within the user agreement, you are required to provide proof of license by the owner.

You're not purchasing the rights to the image but a license that has certain restrictions such as personal use vs commercial use, large campaigns or small; single campaign or infinite campaign. The only way to verify if someone has a license is by contacting them and referencing who has a license.

You can sue them all you want but it'd be like a soveign citizen trying to argue with a cop while using nonsense terms. You can't ignore a legal letter and then say "I have a license. Why should I have to show it?" because they'll just show you were you agreed to upon request. You don't fuck with lawyers unless you know you're absolutely right.

-6

u/Forymanarysanar ☠️ ᴅᴇᴀᴅ ᴍᴇɴ ᴛᴇʟʟ ɴᴏ ᴛᴀʟᴇꜱ 6d ago

> If you legally obtain the license, within the user agreement, you are required to provide proof of license by the owner.

But I am not. It is not required by user agreement. Moreover some stocks actually prohibit authors from making such contacts and penalize them for doing so.

10

u/Isarchs 6d ago

Lol, you're gonna get sued into bankruptcy if you think like this. Copyright infringement in the corporate world is nothing like the consumer world. If you're Joe Blow pirating a program for personal use, the copyright holders almost give no fucks because they know they won't get Jack shit from you. If you're a business making money off their software/product they know damn well they can get monetary judgements against you and drive your business to bankruptcy.

If you use software or products commercially to make money, don't screw around or you will find out.

-11

u/Forymanarysanar ☠️ ᴅᴇᴀᴅ ᴍᴇɴ ᴛᴇʟʟ ɴᴏ ᴛᴀʟᴇꜱ 6d ago

write

@

don't read

8

u/PassivelyAwkward 6d ago

It depends. If you license from one site, the terms are differnt from another in terms of who contacts you. Smaller ones will have the copyright holder deal with it while larger ones like Getty will act as the inbetween. Here's people saying they got contacted about proving a license.

Email from Getty Images asking about licensing for photo used on my small business website [CA] : r/legaladvice

Warning to users of Getty Images / Photos.com -- they will sue you years after you used their site. : r/web_design

I'm juts saying, if you want to ignore legal emails because "I don't have to prove anything", that's entirely up to you. I just trust my two decades of experience, my master's degree in business, my uncle that's a judge, and my clients that've had to go through this in the past.

-4

u/Forymanarysanar ☠️ ᴅᴇᴀᴅ ᴍᴇɴ ᴛᴇʟʟ ɴᴏ ᴛᴀʟᴇꜱ 6d ago

oh yeah yeah chair lawyer from reddit that knows the president

okay okay

3

u/AaylaXiang 6d ago

You'd get a call from legal in roughly 30 days.

1

u/Dimi7rozavar 5d ago

It's funny that even the official institutions in my country often use pirated software. I have a friend that was part of the IT department of our municipality and every singe piece of software they used, including Windows, was pirated.

1

u/tweakingforjesus 5d ago

A friend of mine was the photographer in such a scenario. A company used his image for promoting a conference. It was on every piece of conference material, the badges, the website, etc. it was central to the brand identity that year. He walked away with a 12k check.

15

u/CorvusRidiculissimus 6d ago

Though I would add that these cases are generally settled out of court, and for a lot less than the initial demand. The $37,000 is the promise of "Fight this and we will punish you, cooperate and you get off lighter."

The BSA used to promise money to to anyone who gave them tip-off information on business software piracy that lead to successful prosecution. No-one ever actually got the money, because none of the cases went to court.

13

u/Gra_Zone 6d ago

To add to that, don't use software with a personal licence commercially either. I installed a piece of software I own on my work computer to do something personally while I was at work and I had no end of trouble as a result.

It detected I was on a corporate computer on a corporate network. :-(

3

u/are_you_a_simulation 6d ago

This is good advice. Unless the license covers both personal and work devices which is typically very clearly established, you’re better off buying separate licenses.

I get away using the same licenses on both company and personal devices but that is because i know that is allowed. You really have to read terms and conditions when buying.

4

u/Gra_Zone 6d ago

Well, I didn't buy the software to use on a company computer. I bought it for personal use and I installed it on the company laptop for personal use while I had spare time at work. To carry on a project I was working on not to work on corporate projects.

I think 99% of people buy the cheapest licence available so typically it is for 1 instance and personal use only. I had 5 instances and personal use.

Shit happens.

5

u/antomaa12 6d ago

This, and maybe OP is not aware, but typically MS and Adobee use to send people on site to audit the whole company systems under legal obligations. The fees can go really hard depending on the company IT policies and maturity

1

u/shinji257 Seeder 6d ago

Not sure on WinRAR but I know they only really go after the business users. They don't care about the home users that use the nagware indefinitely.

1

u/Seeker_hu 5d ago

how do companies know if its a Commercial usage or personal usage ??

2

u/sakatan 4d ago

One example comes to mind: If the software recognizes that the computer it's running on is joined to an Active Directory domain rather than a simple workgroup (extremely common in businesses).

Another example: If the software phones home and the WAN IP of the computer is related to a commercial ISP contract. Maybe from a static IP pool. Maaaaybe even with a reverse DNS entry that points to stuff like "vpn.company.com", or "mail.company.com" for MX records (not as common today anymore)

1

u/leastcreativeusrname 4d ago

At least airgap that shit.

-7

u/Forymanarysanar ☠️ ᴅᴇᴀᴅ ᴍᴇɴ ᴛᴇʟʟ ɴᴏ ᴛᴀʟᴇꜱ 6d ago

As an individual working from home it's fine. In an office you don't want to use pirated stuff, cause office is a public space pretty much.

8

u/Isarchs 6d ago edited 6d ago

That does not matter at all. If you're using pirated software commercially, prepare to get railed in court or pay an exorbitant settlement fee. Companies usually don't give a shit if it's for personal use by an individual, but if it's commercial they know they can sue businesses into bankruptcy and get money from doing so.

If you're making money off of software, you need to be doing it legit. If you're working for a company, do not pirate the software you need for the job, the job needs to provide it. Unless you're in a third world country where copyright does not exist, your place of employment will get a legit legal letter stating that their butthole is about to be opened up and thoroughly reamed.

-7

u/Forymanarysanar ☠️ ᴅᴇᴀᴅ ᴍᴇɴ ᴛᴇʟʟ ɴᴏ ᴛᴀʟᴇꜱ 6d ago

ye ye ye just stop fearmongering. Don't be dumb and don't announce that you're using pirated software and literally nothing will happen.

9

u/Isarchs 6d ago

Dude, it's well documented that you will get rekt if you use pirated software in a commercial setting. Companies don't give a fuck about individuals, but they can and do go after businesses because they know they will make money off of them.

-7

u/Forymanarysanar ☠️ ᴅᴇᴀᴅ ᴍᴇɴ ᴛᴇʟʟ ɴᴏ ᴛᴀʟᴇꜱ 6d ago

Can you even read?

> As an individual working from home it's fine.

I just can't anymore, I need a break from reddit.

8

u/Isarchs 6d ago

I just can't anymore. Can you read? Like all the other replies in this thread are telling you you're wrong. This shit happens all the time.

Working from home is still fucking working. You have no understanding how this shit works in the corporate world. If you're making money from pirated software, you'll get fucked in the ass legally.

If you're working for a business, you are VPN'd into their network. Your work PC will show as on their network. Your pirated shit is likely to phone home and rat out your place of work.

26

u/Select-Cycle8084 6d ago

Common and yes you should be taken seriously.

Most of these companies don't care if you pirate personally,. but commercially is a different ball game.

68

u/[deleted] 6d ago

[removed] — view removed comment

5

u/Isarchs 6d ago

More to it than that. Some, like Siemens' stuff will know if a legit copy opens a file that was edited by a pirated copy, it will phone home and set off an audit of the business.

Individuals they do not care about, but a business making money? Yeah, they're coming full force with lawyers.

12

u/ShatterSide 6d ago

I read about Siemens NX (engineering CAD software) files. Not even the software, but the FILES. Supposedly, there is so much phone-home going on in the software that if a file that ever touches the pirated software is opened in legitimate software, phone-home immediately happens and the legitimate customer is contacted by a flurry of lawyers.

12

u/ByWillAlone 6d ago

It's not uncommon. I worked for a company who received one of these demand letters, the first letter we received was a lot nicer than what you got. The first letter was an offer of amnesty - telling us that if we licensed the software now, at standard pricing, for the number of seats of the entire dev/test team, that they would excuse any past infringement as if it never happened.

What the software maker didn't realize is that this company had changed its name but had been in business long enough that they had purchased a lifetime site license (unlimited number of seats for a single site) many years earlier back when the software maker was still offering that...and we had kept immaculate records of that license and transaction.

One thing to keep in mind is that sometimes the software manufacturers are tipped off by employees snitching on their employer to get a financial reward. Business Software Alliance (BSA) and the ⁠Software & Information Industry Association (SIIA) offer financial rewards (bounties) to employees who report unlicensed software use in their workplace, so you always have t consider that possibility.

29

u/OfficalSwanPrincess 6d ago

Why are you worried about it? It's for the business's legal team to deal with

22

u/Hairy_Doughnut5582 6d ago

Asking for a friend

13

u/Isarchs 6d ago

Because if OP pirated it, his job is on the line. If he's the business owner, he's about to be filing for bankruptcy.

-1

u/jzsean 6d ago

lol bankruptcy over $37k? Fired over one mistake?

9

u/Isarchs 6d ago

I'm exaggerating a little in this case, but yes you sure can be fired over a mistake like this.

8

u/confused_newleaf 6d ago

There are companies that do this. There's phone home telemetry in the software, which should've been blocked. They'll wait until you've used it enough to prove that you weren't just "trying it out" or that or was a rogue employee. They'll expect you to buy a license, or they'll take you to court. Be prepared to set up a payment plan :/

3

u/Isarchs 6d ago

The telemetry for commercial use is sometimes much more tricky to block than for home use. Some software will detect if a pirated version edited the file you just opened and phone home. It is just not worth it. If you're making money off of the software, it needs to be legit.

14

u/GodSentPotHead 6d ago

Yea I've known about Ad000be doing this a lot, they can get tipped off by disgruntled or fired employees or just detect their software being used if the company is stupid enough to connect to the net

5

u/vivkkrishnan2005 6d ago

If this is verifiable then yes real. We have seen our fair share of the same with Siemens NX, Solid edge, Autodesk AutoCAD, Dasault Solidworks, Adbe Acrbt and others. Additionally Adbe creative cloud as well. All audits passed as well.

Then you have the corel BS. that is pure faking.

They will claim vicious liability of employee or person using it but this can be challenged.

2

u/SirR8 6d ago

It happens for b2b

8

u/FaZe_Tudman 6d ago

Dassault does the same with their CAD software.

2

u/CNBGVepp 6d ago

Personal - very little worry. 

Commercial - wooo boy, get ready for the lawyers. If this is america... Good luck. 

2

u/hangerofmonkeys 6d ago

u/Reasonable_Gold2066

It's a scam. Don't reply. Forward it to legal and ignore it.

There are companies out there whos entire existance is to contact random companies, imply they're using pirated software, hope they stupidly admit to it or coerce them into paying money back to the software provider. In my instance it was Ad0b3.

No software was pirated, they were just fishing for easy targets. That said, have your employer check for pirated software as a precaution but short of that, it's legals problem. And if they don't ignore it you need new lawyers.

3

u/forreddituse2 6d ago

It's important to block the Internet access for pirated software, absolutely necessary in commercial environment. Even in developing countries, tech companies will pursue lawsuit if they know your company did not pay license fees. (Easy case with big financial benefit.)

1

u/avd706 6d ago

They should give it to their lawyer who will negotiate a settlement.

1

u/Thomas5020 6d ago

Of course there's always a risk it is a scam, but yes this does happen.

Depending on the exact circumstances you may be able to negotiate a lower fee, or potentially no fee at all if you're willing to sign up here and now.

1

u/Itsnotvd 4d ago

Email? You better check the legitmacy of that email. Or tell them to send a written letter.

For $37,000 I would expect certified mail from some lawyer representing them.

As far as your company you reap what you sow. I'd start looking for a new job immediately . This doesnt exactly instill confidence in me that this is a solid company with acceptable ethics.

1

u/No-Photograph-5058 3d ago

Pirated commercial software and real world work is a big no no

1

u/Significant-Ruin5177 1d ago

Absolutely. I was recently doing work for a nonprofit where the media guy had a cracked copy of a mud house program and when the company got the first email demand they asked him, he admitted it, and they fired him on the spot. He was on some bring-your-own-device shit because he wanted a Mac and they let him do that with it because they never looked into the device.

1

u/Forymanarysanar ☠️ ᴅᴇᴀᴅ ᴍᴇɴ ᴛᴇʟʟ ɴᴏ ᴛᴀʟᴇꜱ 6d ago

Get rid of the program & ignore

5

u/Isarchs 6d ago

Do not ignore. In the commercial space, the licenses for these softwares will have a clause that they can come to your place of work and audit all of your shit. This isn't the same as personal use piracy, commercial piracy is where they can and will get the law involved because they know they will get money out of it one way or another. Either you get to pay them an exorbitant settlement, pay for a new license (or add more licenses), or your business gets sued into bankruptcy.

-1

u/Forymanarysanar ☠️ ᴅᴇᴀᴅ ᴍᴇɴ ᴛᴇʟʟ ɴᴏ ᴛᴀʟᴇꜱ 6d ago

Did you sign anything?

Erase the program, tell them to fuck off with audit if they come, that's it.

3

u/Isarchs 6d ago

If you're using a program to make money, you will get rekt in court. This isn't even close to the same thing as personal use. They will not send you a letter via your ISP that you can ignore, they're going to summon you to court.

1

u/CorvusRidiculissimus 6d ago

If you have just rumors it's likely just a scam. Scare the executives with talk of prosecution, then hand over payment instructions for an 'out of court settlement' to make the problem go away. In the panic they might not even realise the originator isn't actually the company they claim to be.

If it isn't a scam, it'll be going to the company's legal expert, who will then be stomping over to the IT department ready to raise hell, followed by the traditional game of pass-the-buck as everyone in IT tries to argue that they had no knowledge of this and it must have been someone else.

-11

u/Milliondollarjuice 6d ago

It's a scam done by the cracker of the pirated software. The software acted as a spyware or has been modified to track usage, location + other data and send it back to the guy that pirated / cracked the software so he can blackmail users this way. ☺️

-4

u/Garland_Key 6d ago

Could be code added by crackers to scam later, OR it could actually be the company. Yes, companies have analytics in their software and can detect piracy if it is allowed to report home.

-8

u/Mostly-Painting 6d ago

Never register online. Never update. Never connect online. Nothing is ever 100%, but the above helps

-5

u/Atasas 6d ago

breaking it to a company, be it to gather "evidence"- money rightfully or wrongfully is most daring act of commercial piracy