Helpnetsecurity Scammers Exploit GTA VI Hype with Malware and Crypto Scams
Article Content
- •Scammers have created 121 new domains related to GTA VI, exploiting the game's upcoming launch.
- •Many fake sites demand cryptocurrency payments or distribute malware disguised as game downloads.
- •Rockstar Games has not announced any PC or mobile versions, yet scammers continue to advertise them.
As the launch of Grand Theft Auto VI approaches on November 19, 2026, scammers are targeting fans with fake download sites offering supposed early access and mobile versions of the game. Research from Netcraft revealed that 121 new domains related to a leaker named CyberLeek appeared between July and October 2026, with many sites asking for cryptocurrency payments or distributing malware. Some sites, like gta6cyberleek.com, offered downloads flagged as trojans by security engines. Despite Rockstar Games confirming no PC or mobile versions, scammers continue to lure users with false promises of early access for up to $199 in crypto. The scams are expected to evolve post-launch, potentially leading to further fraudulent activities related to the game.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track Chaos Ransomware and Rockstar Games in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What types of scams are being reported?
Are these scams actively exploiting users?
What should users do to protect themselves?
Continue Reading
Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects…
Chinese Actor Compromises US Government Networks via PHP2Shell Exploit A suspected Chinese nation-state actor exploited vulnerabilities in Palo Alto Networks firewalls using a chained PHP2Shell exploit and a Linux kernel privilege escalation flaw. The attack, which began on October 23, targeted 25 servers across the US, Japan, Taiwan, and South Korea, with a focus on US…