A fake Grand Theft Auto VI download is spreading malware that steals passwords, gaming accounts, browser cookies, and cryptocurrency wallet data. This matters for families because GTA VI has no announced PC version, beta, demo, or early-access program, so any current offer for one is a scam.
What happened
Researchers followed a link advertising a “GTA 6 EXE file download” from a Google Colab notebook, according to Help Net Security. The link opened a site called Windows Software Hub, which displayed reassuring labels such as “Virus Free” and “Verified” and offered a ZIP archive.
The archive contained a small executable instead of an actual game. Its README instructed users to run the program as an administrator, ignore a security warning, and create an antivirus exclusion if protection software blocked it. Those instructions are major warning signs: legitimate game installers should not ask users to weaken antivirus protection.
Cynet researchers identified the file as a loader for WARDEN Stealer. Help Net Security reports that the malware can take saved passwords, browser cookies, Steam and Roblox credentials, and cryptocurrency wallet information. It can also inject code into browser processes, replace cryptocurrency addresses copied to the clipboard, check whether it is being analyzed, and download additional malware.
Scammers are also promoting fake GTA VI stores, giveaways, cryptocurrency offers, leaked builds, and early-access registrations, according to WeLiveSecurity. Some fake pages imitate Rockstar, PlayStation, Xbox, or Steam sign-in screens to capture account credentials.
Who is affected
Windows users searching for a GTA VI PC installer, leaked version, crack, beta, or early access face the clearest risk. Parents should also warn children and teenagers who use Steam or Roblox and may be tempted by videos, search results, social posts, or messages promising access before release.
GTA VI is scheduled for PlayStation 5 and Xbox Series X|S on November 19, according to the sources. Rockstar has not announced a PC edition, PC system requirements, playable demo, beta, or program that lets customers play early.
What to do now
Do not download any GTA VI PC installer. Delete unopened ZIP or EXE files claiming to contain the game. Do not follow instructions to disable antivirus protection, add an exclusion, or bypass a Windows security warning.
Use official pages instead of search-result download links. Type Rockstar Games, PlayStation, or Xbox addresses directly into your browser and verify any release or preorder claim there.
If you ran a suspicious installer, disconnect that PC from Wi-Fi or Ethernet. Run a full scan with your installed security software, remove anything it detects, and do not reconnect until the scan is complete.
Change exposed passwords from a different, clean device. Start with email, Steam, Roblox, cryptocurrency services, and any account whose password was saved in the affected browser. Use a different password for every account and sign out other active sessions where that option is available.
Check cryptocurrency transfers carefully. Because the malware can replace wallet addresses copied to the clipboard, compare the full destination address with the intended address before approving a transaction.
Warn other people who use the computer. Tell family members that current GTA VI PC downloads, betas, demos, and early-access offers are not legitimate, even when a page displays security badges or appears on a familiar cloud service.
Sources
- Fake GTA 6 download goes after Steam logins and crypto wallet data — Help Net Security
- GTA VI isn’t out yet – and the scams are already in full swing — WeLiveSecurity
Written by the CyberSec24 news desk with AI assistance, from the sources above. Spot an error? Tell us and we'll correct it.