Sirf Such

Truth that Matters. Stories that Impact

Sirf Such

Truth that Matters. Stories that Impact

Technology

Fake Grand Theft Auto VI Demo Websites Used to Distribute Password-Stealing Malware

Cybercriminals are exploiting the heightened anticipation surrounding Grand Theft Auto VI by distributing malicious software disguised as an early playable demo of the game. According to cybersecurity company Malwarebytes, fraudulent websites posing as the game developer, Rockstar, are tricking eager gamers into downloading information-stealing malware onto their computers.

What Happened

Following multiple delays and an extended wait spanning more than a decade since the release of GTA 5, bad actors are leveraging gamer interest to carry out cyberattacks. Attackers have set up fake web portals that closely impersonate Rockstar, the developer of the upcoming title, and falsely advertise an exclusive playable GTA 6 demo.

When visitors click on the “Play Now” button, the site serves a file designed to resemble a standard game setup installer. However, no legitimate GTA 6 demo exists. Cybersecurity researchers at Malwarebytes identified the download as an information stealer rather than actual gaming software.

Once installed, the malicious program locates and extracts sensitive data stored inside the victim’s web browser. This includes stored passwords, browser cookies, and active logged-in sessions. Because session tokens are harvested, attackers can bypass multi-factor authentication in certain cases and log into online accounts directly as if they were the legitimate account owners.

Key Highlights

  • Fraudulent web pages are impersonating game developer Rockstar to lure players with a nonexistent GTA 6 demo.
  • Cybersecurity firm Malwarebytes confirmed the “Play Now” downloads deliver information-stealing malware disguised as an installer.
  • The malware harvests passwords, cookies, and active session tokens stored within users’ web browsers.
  • Stolen session cookies can allow attackers to access accounts even when multi-factor authentication is enabled.
  • GTA 5 remains one of the best-selling titles in history, trailing only Minecraft, driving immense consumer attention toward its sequel.
  • Rockstar has not released any official demo for Grand Theft Auto VI.

Why This Matters

This malicious campaign shows how cybercriminals take advantage of intense public interest and long-awaited entertainment releases. Because Grand Theft Auto 5 sold more copies than any game other than Minecraft, millions of players are closely tracking the sequel after years of delays.

The threat is particularly serious due to the nature of session hijacking. When malware steals active browser cookies and session data, attackers do not necessarily need to solve two-factor authentication prompts. They can enter active accounts unimpeded, putting personal, gaming, and financial accounts at immediate risk.

What to Watch Next

Grand Theft Auto VI is currently expected to launch on November 19, 2026, following multiple scheduling adjustments. In the interim, an extended look at the game is scheduled to air on Netflix on Thursday, which may offer clarity regarding the authenticity of recent leaks and developments. Users are advised to avoid downloading files from unofficial sources and verify all announcements through verified distribution channels.

Frequently Asked Questions

Is there an official GTA 6 demo available to play?

No. There is no legitimate or official GTA 6 demo available, and any website offering a playable download is fraudulent.

What does the malware do once downloaded?

According to Malwarebytes, the malware acts as an information stealer. It extracts passwords, browser cookies, and logged-in web sessions directly from the user’s internet browser.

Can the malware bypass two-factor authentication?

Yes, in certain cases. By stealing active browser cookies and logged-in sessions, attackers can sign in as the account holder without triggering multi-factor authentication prompts.

Source: TechCrunch, citing research from cybersecurity firm Malwarebytes.