← Voltar ao feed
high gaming

Fake GTA 6 PC installer malware steals Steam, Roblox, crypto wallet data

1 fonte(s) · 1 atualização(ões) · publicado 13/11/2026 12:00 · coletado há 1 hora

Researchers at Cynet uncovered a fake GTA 6 executable download hosted via a Google Colab notebook that delivers a WARDEN Stealer loader. The malware aims to harvest saved passwords, browser cookies, Steam and Roblox credentials, and cryptocurrency wallet data from infected machines. The installer instructs users to disable defenses including antivirus to proceed. Despite advertising a 72 MB file, the actual executable is only 796 KB and contains no game content, instead checking for virtual machines, injecting code into browsers, replacing cryptocurrency clipboard addresses, and capable of downloading additional malware. The identified command-and-control server is uroker.casa; however, a related IP address 104.21.75.176 is a shared Cloudflare IP and should not be blocked. This campaign targets users searching for unauthorized or early access GTA 6 PC versions, which do not exist as the game launches without a PC release at this time.

Linha do tempo

  1. helpnetsecurity.com ↗ · pub. 13/11/2026 12:00 · coletado 13/11 12:02 primeiro registro

    Fake GTA 6 PC installer malware steals Steam, Roblox, crypto wallet data

    ler a análise desta fonte

    Researchers at Cynet uncovered a fake GTA 6 executable download hosted via a Google Colab notebook that delivers a WARDEN Stealer loader. The malware aims to harvest saved passwords, browser cookies, Steam and Roblox credentials, and cryptocurrency wallet data from infected machines. The installer instructs users to disable defenses including antivirus to proceed. Despite advertising a 72 MB file, the actual executable is only 796 KB and contains no game content, instead checking for virtual machines, injecting code into browsers, replacing cryptocurrency clipboard addresses, and capable of downloading additional malware. The identified command-and-control server is uroker.casa; however, a related IP address 104.21.75.176 is a shared Cloudflare IP and should not be blocked. This campaign targets users searching for unauthorized or early access GTA 6 PC versions, which do not exist as the game launches without a PC release at this time.