Scammers exploit hype around GTA 6, post fake pre-release build to spread malware
The fake build is fully fake: it’s junk data and a virus.
A fake GTA VI ISO is circulating on the web. Image by Shutterstock/Cybernews.
Follow us
- A circulating 113GB GTA 6 PC ISO is fake and reportedly contains malware, according to users who analyzed it.
- The file appeared amid high fan interest before GTA 6’s planned November 19 release and upcoming extended preview.
- One user said the malware tries to disable Windows Defender protections and shut down security software.
- Scammers appear to be exploiting GTA 6 hype, making unofficial downloads risky for fans and their devices.
Key Takeaways by nexos.ai, reviewed by Cybernews staff.
If you see someone online claiming they have a working Grand Theft Auto 6 PC build, don’t fall for it. The one circulating on the web right now is fake and has a virus hiding inside.
When a GTA gaming enthusiast recently claimed on X that a 113GB GTA 6 ISO file is being shared online, fellow gamers went a little mad with excitement.
After all, the game’s release day, November 19th, is fast approaching, and it’s been more than 18 months since the last trailer for GTA 6 was released.
Yes, Rockstar has planned an August 27th release of an extended GTA 6 look on Netflix, but fans are anxious – even if the game’s developer is known for being tight-lipped about its projects.
There already is a leak campaign going on, with the leaker, known as Cyberleek, releasing gameplay clips in protest against Rockstar’s decision not to release a disc version of the game at launch.
So when X user @GTAGolden_ urged his followers to “take one for the team” and verify whether the ISO file circulating across various torrent sites is a legitimate build of GTA 6, some responded very quickly.
The conclusion of at least one follower who said he did some reverse engineering disappointed many – the file is not only fake but also contains malware.
“Did some reverse engineering. It is fully fake and full of viruses,” another X user, @Aidas29506493, said, suggesting that the huge file is mostly junk data alongside a small 50KB virus.
“The decompiled bytecode literally contains commands to whitelist the entire C:\ drive in Windows Defender (powershell Add-MpPreference -ExclusionPath %SystemDrive%\) and kill security software (taskkill -f).”
Some netizens think an unknown hacker is trying to get Rockstar to download a fake file so they can then infiltrate the system to access the actual, genuine GTA 6 files.
Most, though, have no doubt it’s a bad attempt at scamming GTA 6 enthusiasts. Scammers have probably decided to use the hype around the upcoming game to spread malware.
Check if your data was exposed
Find out if your email and related personal information have appeared in known data breaches.
However, there are reports that the recent leaker, Cyberleek, is indeed threatening to leak the entire playable build.
“CYBERLEEK has the build. It has had it for some time, and it no longer lives in one place," the group posted on its website, now shut down after Take-Two, Rockstart’s parent company, scrambled into action.
“Copies sit on drives and servers spread across the globe, in places Take-Two cannot reach. There is nothing left to seize. There is no server to raid. There are only copies, and none of them take orders anymore.”
Torrenting an unreleased game is risky. The fake files can be used to distribute malware and compromise users’ devices.
Stay updated with our latest stories and follow us on social media
Be the first to discover new stories, ideas, and updates from our team.
NordVPN's Threat Intelligence team recently also uncovered a wave of malware and scam campaigns built specifically around GTA VI hype.
“Every time GTA VI makes headlines, leaked footage spreads through re-uploads, Discord links, and unofficial mirrors, which is exactly the environment where fake 'leak' downloads and credential-harvesting pages thrive," said Marijus Briedis, CTO at NordVPN.
Ourchasing GTA 6 officially once it’s available in November is the safest way forward, experts say.
