Scammers capitalize on GTA 6 hype to push malware and crypto cons
Scammers offer fake GTA 6 early access and mobile versions for crypto payments or malware before the November 19 launch.
Scammers are offering supposed leaked builds, early copies and phone versions of Grand Theft Auto VI weeks before the game’s November 19 launch. Sites borrow the name of popular GTA VI leaker CyberLeek, promise early access or mobile versions that do not exist, or give the game away for free. Some sites push malware or ask for money upfront; others hide the promised download behind a content locker that sends visitors through surveys. Netcraft examined GTA VI-themed domains registered between July 1 and October 27, 2026, and warned that sites can change quickly.
Unconfirmed: The leaker is an unidentified person or group
- Sites using CyberLeek name offered fake GTA VI downloads
- GTAVI.exe flagged as trojan by 34 of 68 VirusTotal engines
- Some sites asked for $100 or $199 cryptocurrency to unlock non-existent access
- Mobile APK files and giveaway pages demand personal details or offer completion
- Post-launch, fake GTA$ bonus offers will likely target saved payment methods
- Vendors
- rockstarplaystationxbox
- Products
- gta6
- Victims
- gta6 users
- Organizations
- netcraft
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | cyberleek.click | es on VirusTotal flagged, mostly as a trojan. Another site, cyberleek[.]click, assured visitors its launcher carried “no malware or vir |
| domain | gta6cyberleek.com | d domains have included “cyberleek,” 100 of them in August. gta6cyberleek[.]com offered a free GTA VI download (Source: Netcraft) At gta6 |
| domain | gta6.exposed | ries X|S, with no PC version and no early release. Even so, gta6[.]exposed offered the game for any platform, PC included, for $199 |
| domain | mygta6.icu | al details. Giveaway pages work the same way. Sites such as mygta6[.]icu show fake feeds of players claiming keys and counters of |
From the original article
3 min read at helpnetsecurity.com
Scammers are offering supposed leaked builds, early copies and phone versions of Grand Theft Auto VI (GTA 6) weeks before the game’s November 19 launch, Netcraft warned in a new blog post. The company looked at GTA VI-themed domains that appeared between July 1 and October 27, 2026.
By Sinisa Markovic · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.