Hackers Use Fake GTA 6 Downloads to Deploy RATs, Infostealers and Data-Wiping Malware
Huntress tracked fake GTA 6 downloads distributing NJRAT, DCRAT, Mercurial Grabber, and Chaos ransomware used as a wiper against gamers.
45
- Mentions · 7d0
- Mentions · 30d0
- All mentions4
- First seenAug 16, 2026
- Last mentionedSep 10, 2026
Timeline
4 articles · newest firstHackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware
Infoblox reports Sable Squirrel spent nearly $7 million on expired domains to redirect traffic to illegal sports streaming, gambling, and malware infrastructure.
55
Silver Fox Targets Japanese Manufacturer with 3
Chinese group Silver Fox used new vulnerable drivers and DLL side-loading to deploy ValleyRAT at a Japanese industrial manufacturer.
58
Crooks Are Buying Your Expired Domains and Using Them to Deliver Malware
Infoblox finds dropcatch expired domains fuel malware delivery and C2, with actor Sable Squirrel spending ~$7M on 10,000+ domains.
58
Appears with
- Remcos RATproduct · 2
- Infobloxvendor · 2
- AsyncRATproduct · 2
- Sable Squirrelthreat actor · 2
- njRATproduct · 2
- njRATmalware · 2
- Quasar RATproduct · 2
- DCRatmalware · 2
- Huntressvendor · 1
- Rockstar Gamesvendor · 1
- Grand Theft Auto VIproduct · 1
- SocGholishthreat actor · 1
- AsyncRATmalware · 1
- Swiping Squirrelthreat actor · 1
- ValleyRATmalware · 1
- Gh0st RATproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.