464/69 Wednesday, August 26, 2026
Reports indicate that cybercriminals are exploiting the hype surrounding leaked information about Grand Theft Auto VI, or GTA VI, to trick users into downloading fake game files containing malware. A 113 GB file was found claiming to be a playable build of GTA VI. However, analysis by users on the X platform found that the file was fake and contained a large amount of empty data added to artificially inflate its size. The actual malicious payload was only approximately 50 KB. This technique makes the file appear more realistic and tricks users into believing it is a large game file leaked ahead of release.
Analysis of the malware code found commands attempting to add the entire C:\ drive to the Windows Defender exclusion list through PowerShell. It also contained commands designed to disable other security software, indicating that the attackers intended to reduce the system’s detection and protection capabilities before carrying out further actions. The incident occurred amid the spread of gameplay clips and map data allegedly linked to GTA VI, making some users more likely to trust other download files subsequently shared through Discord, torrent sites, mirror sites, and other unofficial channels.
In addition to the large fake game file, researchers also found fake websites claiming to offer GTA VI downloads for Windows, using DLL side-loading techniques to execute malware. A fake application named “GTA 6 Mobile” was also observed redirecting users to domains associated with infostealers and ransomware, along with fake Rockstar Social Club login pages designed to steal user credentials. Experts warn that there is currently no GTA VI build legally available for public download or play. Users should avoid downloading game files from torrent sites or untrusted websites, refrain from opening installers from unofficial sources, and verify information only through Rockstar’s official channels to reduce the risk of malware infection, phishing, and account theft.
Source: https://securityaffairs.com/197772/malware/cybercriminals-turn-gta-vi-leaks-into-malware-bait.html