Nobody Is Selling GTA VI Yet: the “$50 Leaked Copy” Drains Crypto Wallets, the 100GB ISOs Carry Ransomware
Two security firms have documented scams riding the leak saga. Malwarebytes found a fan-style countdown site selling a “leaked copy” that empties crypto wallets; Huntress found 100GB-plus “ISOs” packed with remote-access trojans, an infostealer and ransomware used as a wiper.
Reported: both are security firms’ own published findings.
The “leaked copy” site (Malwarebytes, September 1) dresses up as a fan countdown page and sells a playable GTA VI for $50 or 1 SOL. The page loads a wallet drainer as soon as you arrive — one script aimed at Solana and a larger one working across seven other chains. Malwarebytes’ summary: “Nobody is selling a playable copy of GTA 6 yet.”
The fake ISOs (Huntress, September 9; covered by TechRadar) are padded past 100GB to look real and spread through search results, forums, torrents and social media. The sample Huntress took apart held a fake installer, several copies of the NJRAT remote-access trojan plus DCRAT, the Mercurial Grabber infostealer (Discord tokens, browser passwords and cookies among its targets) and Chaos ransomware used as a wiper. That sample appeared to target Russian-speaking players; others circulate. The malware is old enough that mainstream antivirus catches it; if you ran one, Huntress’s advice is to reimage the machine and reset your passwords.
The rule is simple. Until pre-load opens on November 12, there is no playable GTA VI to download anywhere. This summer’s leaker claimed to have a playable build and posted footage from it, but nobody is selling one — anything offered for money or as a download is a scam.
Sources
Every story is labelled Confirmed, Reported or Unverified. We don't dress a rumour up as a fact. All GTA 6 news.
Think this one holds up? Argue it out with the crew — every countdown day there’s one extra detail that only goes up in the Discord. Join the Discord →