Cybercriminals are exploiting the widespread anticipation for Grand Theft Auto 6, flooding the internet with phishing scams and malware ahead of the game’s highly anticipated November release.
Exploiting Anticipation
According to research from NordVPN’s Threat Intelligence team, malicious actors have quickly moved to capitalize on recent rumors of soon-to-open pre-orders for the game, viewing the hype as an opportunity to harvest data from unsuspecting victims.
The threats range from basic phishing sites to sophisticated, multi-platform malware campaigns targeting platforms that the game won’t initially support, NordVPN reported. The firm added that these threats are appearing in various forms and targeting gamers.
While the VPN provider’s researchers identified campaigns targeting PC and mobile users—platforms on which GTA 6 is not confirmed to release—several websites are promising “exclusive beta keys” for owners of PS5 and Xbox Series consoles. In one case, users seeking access are prompted to pay for subscriptions or download software.
Preying on FOMO
The company’s findings highlight how cybercriminals often prey on the fear of missing out (FOMO), according to NordVPN CTO Marijus Briedis.
“When people are desperate to get early access to something, their guard comes down,” he noted. “That’s the window attackers exploit.”
Other cybercriminals are targeting gamers who want to obtain Rockstar Games’ next title for free. NordVPN identified several clones of well-known piracy websites designed to distribute malware disguised as game files for Windows machines.
In one instance, running a fake package activated a malicious file disguised as an Nvidia graphics driver, which quietly allowed cybercriminals to alter a device’s memory, download additional malware, and receive external instructions, according to NordVPN.
Fake Apps and Phishing
Furthermore, a fake Android app—which contains no actual game—uses the game’s branding to silently serve full-screen ads. The app’s users are also directed to websites that encourage subscriptions or the download of further malware, NordVPN said.
Finally, NordVPN reported tracking “hundreds of amateur phishing pages” that target Rockstar Social Club credentials via fake login forms. NordVPN noted that these accounts can be resold on the dark web or used for in-game fraud.
The firm’s researchers traced one fake GTA 6 app for Android users to a domain with a history of distributing banking trojans, ransomware, and infostealers—representing a unique threat to cryptocurrency owners who safeguard digital assets using private keys.
While rumors have circulated for years that GTA 6 will incorporate crypto, these claims remain unsubstantiated as the game approaches its November release. Bitcoin gained prominence in relation to the game when a doctored trailer was leaked years ago.
Leave a Reply