ALERT! Gaming Scam Site Steals Crypto With Malicious Drainer!

A sophisticated new scam leveraging the immense anticipation for Grand Theft Auto VI (GTA VI) has been uncovered, specifically targeting cryptocurrency users. Cybersecurity firm Malwarebytes has identified a deceptive website masquerading as an official GTA VI fan countdown, enticing visitors with the promise of downloading an alleged leaked copy of Rockstar Games' highly anticipated title.

Upon closer inspection, this convincing-looking page harbors a malicious cryptocurrency wallet drainer. This advanced piece of malware is designed to simultaneously target multiple blockchain networks, making it a significant threat to unsuspecting users. The scam operates by combining genuine-looking GTA VI information and promotional material with a nefarious payment scheme that prompts users to connect their crypto wallets. Should users inadvertently approve a malicious transaction, they stand to lose substantially more than the advertised purchase price for the supposed game leak.

Malwarebytes has previously documented similar tactics, including websites offering 'early access' for cryptocurrency payments, and fake GTA VI demo or 'Extended Look' pages. To bolster its credibility, the current scam site features legitimate promotional assets and correctly states that GTA VI is slated for release on PlayStation 5 and Xbox Series X|S, while notably omitting any mention of a PC version, which Rockstar has not yet announced. Despite this, the site offers PC downloads after payment, creating a clear inconsistency.

The website presents two distinct offers for the alleged leaked copy: one demanding $50 and another requesting 1 SOL (Solana), valued at approximately $102 at the time of Malwarebytes' analysis. Adding another layer of deception, the operators attempt to build trust by warning visitors about other websites that claim to offer GTA VI leaks, ironically using a common scammer tactic.

However, several inconsistencies become apparent upon detailed examination of the page. For instance, the website's footer explicitly states that it does not offer purchases, directly contradicting the payment requests presented elsewhere on the site. Furthermore, while the site correctly acknowledges GTA VI as a console-only release, its FAQ section bizarrely promises a PC download upon payment. Malwarebytes also identified various errors in the sales copy, including a misspelled reference to 'downloading' and an erroneous mention of 'GTA IV' instead of 'GTA VI'.

The cybersecurity firm pinpointed two separate malicious code components within the payment option section. One specifically targets Solana wallets, calculating a transfer designed to extract all funds while leaving only enough to cover transaction fees. The second, more comprehensive script is capable of compromising wallets across numerous EVM-compatible blockchain networks, including Ethereum, Polygon, BNB Smart Chain, Avalanche, Arbitrum, Base, and Fantom. This latter component is disguised as a legitimate wallet-connection tool, but Malwarebytes confirmed the presence of malicious code layered on top of it.

This discovery follows a recent incident, reported by U.Today, where a mysterious figure linked to a separate wave of GTA VI leaks reportedly moved approximately $350,000 out of a crypto operation named CYBERLEEK, according to blockchain analysis. The individual responsible for these earlier leaks has not been publicly identified, highlighting the ongoing security risks surrounding such highly anticipated releases in the digital and cryptocurrency realms.