Nowdays nothing is safe anymore, DMA wich has been the safest is detected more than ever, arduino right now is in the middle, it depends on how the cheat developer connect it to the pc if via Ethernet Host Shield to pc or router, there is many way but its a metter of time that vanguard will detect them too... Just follow the holy rule of cheating, CHEAT ONLY ON AN ACCOUNT YOU ARE READY TO LOSE.