Fake GTA VI Download Sites Push Malware Ahead of Launch

Fake GTA VI download sites lure gamers with leaked builds, malware, crypto payment demands and mobile versions ahead of the game’s November 19 launch.

Scammers are targeting Grand Theft Auto VI fans with supposed leaked builds, early access and mobile downloads ahead of its November 19 launch. Some offers lead to files flagged as malware, while others demand cryptocurrency payments.

Fans waiting for Grand Theft Auto VI have already been offered leaked game builds, early access, and mobile versions that Rockstar Games has never announced. Some of these offers come with cryptocurrency payment requests or downloads flagged as malware.

Now, new research from Netcraft, shared with Hackread.com, shows how scammers are using the November 19 release to attract gamers to fraudulent websites. The findings also build on a pattern Hackread.com has covered since 2024, when fake GTA VI beta downloads were promoted through Facebook ads.

Fake Leaked Builds and Cryptocurrency Payments

Netcraft found 121 newly registered domains containing the name CyberLeek, an unidentified person or group that began publishing apparent GTA VI gameplay footage on August 18. A hundred of these domains appeared in August alone, although Netcraft noted that not all were fraudulent.

Cyberleek shares almost 25 minutes of unseen GTA 6 gameplay
by u/HotHoneyMustardFan in GamingLeaksAndRumours

Some websites used CyberLeek’s name to advertise supposedly playable versions of the game. At one website, gta6cyberleek.com, a file named GTAVI.exe was flagged by 34 of 68 security vendors as a Trojan.

Another site detected was cyberleek.click. This site offered a launcher flagged by 18 of 62 engines before demanding $100 in cryptocurrency to unlock access. The detection figures indicate suspicious files, not confirmed infections. Netcraft did not make the requested payment.

Fake PC and Mobile Versions

Rockstar Games has announced GTA VI for PlayStation 5 and Xbox Series X|S, but has not announced PC or mobile releases. That has not stopped websites from advertising supposed PC keys, Android downloads, and early-access packages.

Netcraft’s research also found a site selling alleged PC and console keys for $199, while other pages offered APK files or claimed to provide Android and iOS versions.

Some sites never deliver a download, and instead, use content lockers that require visitors to complete surveys, install apps, or provide personal information before supposedly revealing a game key. Netcraft found this approach on giveaway sites including mygta6.icu and gta6keycodes.com.

Scams May Continue After Release

Hackread.com has previously reported fake GTA VI early-access websites demanding cryptocurrency payments in June 2026, as well as malware disguised as beta downloads in 2024. Netcraft’s latest findings show how these scams are expanding beyond fake game access.

The company expects scammers to turn toward cheats, money glitches, fake support pages, and free GTA$ offers after launch. It also found live GTA$ bonus pages alongside registered but inactive domains resembling Rockstar support sites. It expects cheats, fake rewards and account-support scams to become more prominent after launch.

The fake downloads and early-access offers may lose their appeal after Nov. 19, but cheats, in-game currency, and account support are likely to provide fresh bait for the same audience.

Netcraft warns users against trusting unofficial game downloads simply because they pass security checks, noting, “A clean scan at one point in time also does not turn an unvetted, falsely described APK into a legitimate game.”

Deeba Ahmed

Deeba is a veteran cybersecurity reporter at Hackread.com with over a decade of experience covering cybercrime, vulnerabilities, and security events. Her expertise and in-depth analysis make her a key contributor to the platform’s trusted coverage.

View Posts