Huntress found fake Grand Theft Auto VI downloads being pushed through SEO poisoning, gaming forums, torrent sites, and social posts, with some ISO files padded past 100GB to look like a real release. The lure is simple: a user thinks they are mounting a game disc image, but they are actually starting a malicious installer.
Inside the ISO, Huntress found a fake setup that can deliver multiple commodity payloads at once, including remote access trojans, an infostealer, and ransomware used as a wiper. That means the compromise starts when the user runs the installer; once that happens, endpoint protection may still flag the file, but the workstation is already in play and may need to be reimaged.
For Windows shops, the exposure is not limited to games. Any employee who downloads software, mods, or cracks from the open web can be steered into the same search-poisoned installer flow, turning a single eager click into credential theft or destructive malware on the endpoint.