Scammers Leverage GTA 6 Hype for Malware and Crypto Scams
Cybercriminals are exploiting the immense anticipation for Grand Theft Auto VI by deploying fake download sites, offering malware, and pushing cryptocurrency scams.
As the release date for Grand Theft Auto VI (GTA 6) approaches, threat actors are actively capitalizing on the game's massive hype. Scammers are luring eager players with fraudulent offers of leaked builds, early access, and non-existent mobile versions of the highly anticipated title. These deceptive schemes aim to distribute malware, trick users into completing surveys for affiliate revenue, or directly solicit cryptocurrency payments.
Security researchers at Netcraft have identified numerous newly registered domains that exploit the game's name and associated leaker monikers, such as 'CyberLeek.' These domains often mimic official sources, promising free downloads or early access. However, upon closer inspection, many of these sites lead to malicious payloads. For instance, a site offering a supposed free download of 'GTAVI.exe' was flagged by over half of the security engines on VirusTotal as a trojan.
Beyond direct malware distribution, many scam sites employ content lockers. These tactics hide the promised download or game access behind a series of surveys and offers. By compelling users to complete these tasks, the operators generate affiliate revenue, profiting from the user's engagement without ever delivering the promised content. Some more audacious scams even demand upfront cryptocurrency payments, sometimes as high as $100, for access that will never materialize.
Adding to the deception, some scam sites impersonate official vendor stores, accepting pre-orders for versions of the game that have not been officially announced or are not planned for release on certain platforms. Rockstar Games has confirmed GTA VI will launch on PlayStation 5 and Xbox Series X|S, with no PC version or early release announced. Despite this, fraudulent sites offer the game for PC and other platforms, sometimes for hundreds of dollars in cryptocurrency.
The lure of mobile versions is also being exploited, even though Rockstar has not announced any mobile iterations of GTA 6. Scammers distribute Android package (APK) files, instructing users to enable installation from unknown sources, or hide downloads behind "Human Verification" pop-ups that harvest personal information. Similarly, giveaway pages use fake urgency tactics, such as rapidly depleting key counters, to pressure users into completing offers to receive a partial or non-existent game key.
Security experts anticipate that these scam tactics will evolve post-launch. Once GTA 6 is officially released, threat actors are expected to shift their focus to offering fake in-game currency, such as GTA$, or illicitly obtained in-game items. These scams could also target user credentials for Rockstar, PlayStation, or Xbox accounts, potentially leading to account takeovers and unauthorized purchases if users reuse passwords or have payment methods stored.
Until the official November 19 release date, any offers of early access, leaked builds, or mobile versions of Grand Theft Auto VI should be treated with extreme suspicion. The safest approach for consumers is to rely solely on official channels, such as the PlayStation Store and Xbox Store, for legitimate purchases and information regarding the game.