Cybercriminals exploiting GTA VI fever to spread malware

With the highly anticipated launch of Grand Theft Auto VI (GTA VI) this November, the excitement among the gaming community has reached a fever pitch.

Unfortunately, this fervour has created a prime hunting ground for cybercriminals. New research from cybersecurity firm NordVPN has revealed an alarming surge in sophisticated scams, with bad actors using fake beta trials, early-access promises and phishing websites to target unsuspecting fans.

It has been 13 years since the last major Grand Theft Auto release, a fact that NordVPN claims scammers are actively weaponising with highly convincing, Rockstar-branded websites that promise exclusive early access to the game.

These campaigns are particularly dangerous because they target platforms – specifically PC and Android – that have not been included in any official public beta testing. Researchers identified fake installers designed to look like legitimate PC game files.

In one instance, an installer appeared authentic but secretly deployed a malicious file disguised as an NVIDIA graphics driver component to evade detection. Once active, the malware could communicate with attacker-controlled servers to download further malicious payloads or steal sensitive user data.

Mobile users are also under fire. The investigation uncovered fake Android apps marketed as “GTA 6 Beta.” These applications contain no actual game content, serving instead to bombard users with intrusive advertisements or to act as gateways for further malware infections.

Phishing for credentials

Beyond malware, there has been a significant rise in phishing attacks aimed at hijacking Rockstar Social Club accounts. Attackers are hosting fraudulent login pages on reputable services such as GitHub and Vercel, which helps them bypass standard security filters and appear more credible to victims. Once a user enters their credentials, their account can be stolen, sold on the dark web, or used for fraudulent in-game activity.

“GTA VI is one of the most anticipated entertainment launches of the decade, and cybercriminals know that excitement creates opportunity,” says Marijus Briedis, Chief Technology Officer at NordVPN. “Attackers exploit that urgency and curiosity to distribute malware, steal credentials and expose users to further scams.”

Briedis emphasised the importance of maintaining a critical eye, noting: “The reality is that there is currently no legitimate GTA VI beta available for PC or Android users. Any website, app, or download claiming otherwise should immediately raise red flags.”

NordVPN 

How to protect yourself from GTA VI Scams

To avoid falling victim to these campaigns, cybersecurity experts recommend following these essential safety tips:

• Be sceptical of early access: Rockstar Games has not announced a public beta. If a site asks you to complete surveys, download software, or provide login details to access a “beta” or “leak,” it is almost certainly a scam.

• Stick to official channels: Only obtain game information and files from Rockstar Games directly or verified platforms such as the PlayStation Store and Xbox Marketplace.

• Verify login pages: Always inspect the URL before entering credentials. If you are redirected to a login page that feels unfamiliar or is hosted on a third-party domain, do not enter your details.

• Don’t let FOMO win: Fear Of Missing Out (FOMO) is a primary tool for scammers. If an offer sounds too good to be true, take a step back and verify it through official company announcements before acting.