Amid the long wait for the release of Grand Theft Auto VI and the hype surrounding gameplay leaks, scammers have created a network of fake websites offering gamers to download a supposedly PC demo of the game. In fact, instead of the gameplay, users receive malware designed to steal confidential data.
Amid the long wait for the release of Grand Theft Auto VI and the hype surrounding gameplay leaks, scammers have created a network of fake websites offering gamers to download a supposedly PC demo of the game. In fact, instead of the gameplay, users receive malware designed to steal confidential data.
Cybersecurity experts Malwarebytes reported a new threat, TechCrunch reports. The attackers registered several phishing resources that masquerade as the official website of Rockstar Games and placed a «Play Now» button on them.
After clicking, a file called gta6_installer.exe, which is only 1.1 MB in size, is downloaded to the device. Experts have identified it as a malicious program from the Vidar family. It is designed to silently collect passwords, cookies, browsing history, and session data stored in the browser.
«This is an information stealer designed to steal passwords stored in browsers, cookies, and authenticated sessions. Since stolen browser sessions can be used without going through the standard authorization procedure, even two-factor authentication (2FA) is not always able to protect the account,» Malwarebytes notes.
Hackers' access to saved sessions allows them to log into email accounts, social media accounts, payment services, and gaming profiles without the owner’s knowledge.
Grand Theft Auto VI is scheduled for release on November 19, 2026, exclusively for the PlayStation 5 and Xbox Series X|S consoles. Developers from Rockstar Games have not even announced a release date for the PC version and have repeatedly emphasized that there are no public demos, beta tests, or early access to the game.
Recall that for over a week now , unofficial new videos of Grand Theft Auto VI gameplay have been appearing. An unknown hacker (or group of hackers) under the nickname CyberLeek has already published 10 videos from the pre-release build of the game advertising its own cryptocurrency token.
