Malware · 18h ago

Fake GTA VI installer steals browser and crypto data

Cynet traced one fake GTA VI PC download to WARDEN Stealer, which steals browser passwords and cookies, Steam and Roblox credentials, and cryptocurrency wallet data. Grand Theft Auto VI has no PC version, making the advertised installer a lure rather than an early build.

The README tells users to run the file as administrator, click past a security warning, and add an antivirus exclusion if protection blocks it. That coaches victims to make security software ignore the executable before it injects code into browser processes, replaces crypto addresses copied to the clipboard, and can download more malware.

Where users install unofficial downloads on work-connected machines, the lure can expose browser sessions and saved account access as well as gaming logins; clipboard substitution can redirect a crypto transfer. Because the malware can fetch additional payloads, removing the original file may not account for everything left behind.

Timeline

Sources

2 sources covering this story

Part of the PlainSec briefing for 2026-11-14

Editions

Related stories