GTA 6 Leak Site Targets Crypto Wallets with Malicious Drainer

Malwarebytes has uncovered another fake GTA 6 website designed to trick crypto users into downloading malware. The site, posing as a fan countdown, offers visitors a chance to download an alleged leaked copy of Rockstar Games' highly anticipated title. However, the convincing-looking page actually contains a cryptocurrency wallet drainer that targets multiple blockchain networks.

The website combines genuine GTA 6 information with a malicious payment scheme that connects a crypto wallet. Users who approve the wrong transaction could potentially lose much more than the advertised purchase price. One offer asks for $50 while another requests 1 SOL, worth roughly $102 at the time Malwarebytes analyzed the site.

The operators of the website attempt to establish trust by warning visitors that other websites claiming to offer GTA 6 leaks are scams. However, there are several obvious inconsistencies once the page is examined more closely. The footer says the website does not offer purchases, while elsewhere it says GTA 6 is console-only and promises a PC download after payment.

Malwarebytes found two separate pieces of malicious code in the payment option section. One targets Solana wallets and calculates a transfer designed to leave only enough funds behind to cover transaction fees. The second component is a much larger script that is capable of targeting wallets across Ethereum, Polygon, BNB Smart Chain, Avalanche, Arbitrum, Base, and Fantom.