Nov 7, 2026 · 18 min
GTA VI hype fuels a wave of malware scams
Stealing more than the spotlight. [Research Saturday]
Fake game downloads turn anticipation for a major release into a route for remote access, credential theft, and destructive ransomware.
- 1Attackers distribute fake GTA VI installers through search poisoning, torrents, forums, and malvertising.
- 2The installers bundle remote-access trojans, credential stealers, and Chaos ransomware that can encrypt or destroy files.
- 3A fake license error keeps victims engaged with attackers while compromised systems require wiping and reinstallation.
Don't miss
Matt Poto explains how a fake license error can keep victims interacting with attackers after the malware has compromised their systems.
The brief
Grand Theft Auto VI’s anticipation has created a ready-made lure: malicious files masquerading as enormous game downloads spread through search results, torrents, forums, and malvertising.
Huntress researcher Matt Poto found fake installers bundling DC Rat and NJ Rat remote-access trojans, Mercurial Grabber, and Chaos ransomware, combining surveillance, theft, and destruction.
The campaign’s social engineering continues after infection: a fake license error can keep victims focused on contacting the attacker instead of recognizing that their system is compromised.
Microsoft Defender can block the sample discussed, but Poto says compromised systems may still require a full wipe and reinstall, underscoring the cost of a convincing download scam.
As GTA VI anticipation grows, the broader lesson is straightforward: early-download offers exploit excitement before a legitimate release exists, especially among younger or less experienced users.
Books & mentions
Weekly email
State of the Pod, every Monday
The week's most-discussed names and stories from podcasts, with the moments behind them. Free, five minutes, unsubscribe in one click.