Two separate fake Grand Theft Auto VI offers exposed visitors to different crypto theft risks: a Windows download carried a data-stealing loader, while a purported leaked-copy checkout prepared a transaction for nearly all the SOL in a connected wallet. The findings do not link the two cases or their operators.

The download was promoted through a Google Colab notebook linked to a fake “Windows Software Hub” page. Its README instructed users to run the executable as an administrator, bypass a security warning and add an antivirus exclusion. The executable was a WARDEN Stealer loader, not a game installer. In a test environment, the sample was detected and blocked.

The malware could collect saved passwords, browser cookies and browsing data, browser-extension secrets, Steam and Roblox credentials, and cryptocurrency wallet information. It could also inject code into browser processes, replace copied crypto addresses and download additional malware. These are capabilities of the sample; the findings do not establish successful infections or user losses.

Separately, latestgta6.com advertised a purported leaked copy for $50 or 1 Solana (SOL). Selecting the “1 SOL” button checked the connected wallet’s balance and prepared a transaction that left 0.005 SOL for fees while requesting the rest. For a wallet holding 25 SOL, the request would be for 24.995 SOL.

The visitor still had to approve and sign the transaction; simply opening the page did not transfer funds. A 2.4-megabyte script named lucifer.v8.js also appeared on 12 other domains. Eight still served it Friday, Nov. 13. The code could request transfers or token and NFT permissions across Ethereum, Polygon, BNB Smart Chain, Avalanche, Arbitrum, Base and Fantom.

The installer and checkout use different mechanisms: one seeks data from a computer, while the other asks a wallet holder to sign a transaction. The shared script does not establish that the sites had one operator. Neither case has a confirmed victim count or verified loss total. The technical findings add detail to earlier coverage of GTA VI offers seeking crypto payments and wallet access.

Rockstar Games lists Grand Theft Auto VI for PlayStation 5 and Xbox Series X|S, with a release date of Nov. 19; its listing does not include a PC version.

Simon Yoon

Simon Yoon reports on blockchain technology for TokenPost. Send corrections or tips to [email protected].