Scam Site Tries to Sell PC Version of GTA 6 for $50
A scammer appears to be exploiting the recent Grand Theft Auto 6 leaks by dangling a PC version of the unreleased game for a mere $50 as bait.
On Tuesday, antivirus provider Malwarebytes flagged the shady website at latestgta6[.]com, warning it appears to be designed to drain cryptocurrency wallets.
The site suggests it's selling a copy of the unreleased game stolen by CyberLeek, the mysterious group that went viral for leaking footage of an apparent GTA 6 test build last month. "Just for 50$ leaked game ... we are selling the leaks from cyberleek directly," the site says in the FAQ.
In addition, the site claims to sell a PC version of GTA 6, even though the game will only be released for consoles on Nov. 19. The site is selling access for $50 or 1 Solana ($100). But to buy it, a user needs to connect their cryptocurrency wallet to the domain.
"Simply connecting your wallet does not allow the site to take anything. The danger comes when you approve the transaction or permission request that follows," Malwarebytes says. That's because the site has been designed to check a connected wallet's Solana balance and then transfer nearly all the funds to the attacker, minus 0.005 in Solana, which amounts to about 50 cents in US dollars.
Malwarebytes also discovered the site hosting a second payload: a 2.4MB malicious JavaScript file that "inventories the connected wallet, calculates what its assets are worth, reports the details to the attacker, and retrieves transactions for the victim to approve."
"The script is configured to target wallets across seven blockchain networks: Ethereum, Polygon, BNB Smart Chain, Avalanche, Arbitrum, Base, and Fantom. It recognizes major stablecoins on those networks and can request several kinds of access. Depending on what the victim approves, it could transfer cryptocurrency immediately or gain permission to move tokens and entire NFT collections later," Malwarebytes adds. "A transfer takes assets immediately. An approval can give the attacker access to them later. This script supports both."
That said, the site probably won't fool anyone, especially since it contains typos and contradictory language about the game. "THE ONLY SOURCE TO DOWNLAOD GTA IV," the site says at the top.
"There is one leak version of the game," the site further claims. "THERE IS NO FREE DOWNLOAD. Do not belive anyone giving it away for free. Buy from this site and no other. Or risk getting scammed."
Interestingly, the domain blocks users visiting from IP addresses based in Armenia, Azerbaijan, Belarus, Kazakhstan, Kyrgyzstan, Moldova, Russia, Tajikistan, Turkmenistan, and Uzbekistan.
The finding is a reminder to avoid falling for purported leaks. Last month, Malwarebytes also uncovered fake sites offering a demo of GTA 6 that was actually Windows-based malware.
PCMag and Yahoo may earn commission from links in this article.
