Fake GTA 6, real malware: the new scam targeting Windows and Android

Fake GTA 6, real malware: the new scam targeting Windows and Android

Fake GTA 6, real malware: the new scam targeting Windows and Android

https://gizmodo.com/fake-gta-6-real-malware-the-new-scam-targeting-windows-and-android-2000766397

Publish Date: 2026-06-02 16:58:00

Source Domain: gizmodo.com

How the fake GTA 6 beta scam actually works

The playbook is consistent. Attackers spin up sites that mimic Rockstar Games’ visual identity or popular gaming storefronts. Access to a so-called private beta is then pushed through Discord servers, YouTube videos, or niche gaming forums. The link points to either a Windows installer (.exe) or an Android APK presented as the official client.

Once executed, the file actually installs a trojan that opens a backdoor on the machine. Depending on the variant observed, the payload ranges from credential stealers (browser-saved passwords, game session tokens, banking logins) to cryptominers that silently exploit your GPU in the background. On Android, some versions even intercept SMS messages to bypass two-factor authentication.

Block these malwares before installation

Why highly anticipated games have become a top target

Attackers have figured out a simple psychological mechanism: waiting for a major release lowers gamers’ guard. When a title has been hyped for years, the promise of early access suspends the usual instincts of caution. People click faster, temporarily disable their antivirus because it “blocks the download,” accept warnings from Windows SmartScreen they would normally refuse.

GTA 6, set for a fall 2026 release, checks every box on the jackpot list: massive audience, impatient community, presence on both Windows and Android through emulators. The fake beta waves started well ahead of the actual launch and will only intensify in the coming weeks. The golden rule remains straightforward: no beta exists outside Rockstar’s official program, and anything circulating on the side should be treated as suspicious by default.

Turn on the next-gen antivirus

How NordVPN’s built-in antivirus intercepts these files

As of May 27, NordVPN evolved its security module, now branded as a next-generation antivirus. Concretely, the tool scans every file downloaded onto the device in real time,…

Source