Phishing Campaign Targets Crypto Holders with Fake GTA 6 Leak

A recent phishing campaign has been targeting cryptocurrency holders by posing as a seller of leaked Grand Theft Auto VI copies. The malicious website claims to offer the game for $50 or one SOL, but its code is designed to drain connected wallets. According to Malwarebytes, the firm's technical analysis found that the page contains two scripts: one for Solana and another larger script configured for seven additional networks, including Ethereum, Polygon, BNB Smart Chain, Avalanche, Arbitrum, Base, and Fantom.

The latter script is approximately 2.4 MB in size and incorporates legitimate wallet-connection software alongside malicious functions. It can inventory holdings, estimate their value, send wallet and visitor details to the operator, and retrieve transactions for approval. The code also profiles wallets before seeking approval and includes measures intended to frustrate automated scanners and browser developer tools.

Malwarebytes noted that connecting a wallet does not transfer assets; the danger arises when a user signs the transaction or permission request that follows. The firm cautioned that users should reject requests that move nearly an entire balance or grant a game seller control over tokens or NFTs.