Beware of Hacking! Never Click the Download Button on This GTA 6 Demo Site
Anticipation for the arrival of Grand Theft Auto VI, or GTA 6, is being exploited by cybercriminals. A number of fake websites have been found offering a GTA 6 demo that is claimed to be downloadable and playable for free. However, instead of gaining early access to the game, users risk downloading malware that steals personal data.
Security researchers from Malwarebytes discovered a network of sites imitating the identity and promotional materials of Rockstar Games. These sites appear with convincing offers, including claims of being a place to download the official GTA 6 demo.
Malwarebytes, however, stressed that Rockstar Games has not released a GTA 6 demo. The official Rockstar website currently only provides official information, promotional materials, and pre-order options for the game. GTA VI is scheduled for release on 19 November 2026 for PlayStation 5 and Xbox Series X|S.
One of the methods identified is the use of buttons such as ‘Play Now’ on the fake sites. When users click the button, they may be directed to download a file named gta6_installer.exe.
That file is not a demo or official GTA 6 installer, but rather information-stealing malware. In Malwarebytes’ analysis, the malware belongs to the Vidar family, which is designed to search for and extract various information stored on a device, particularly browser data.
The targeted data includes saved passwords and login information, session cookies, browsing and download history, as well as autofill data and browser profiles. The malware reportedly targets a number of browsers, including Chrome, Edge, Firefox, Brave, Opera, and Vivaldi.
If login information is successfully stolen, perpetrators may attempt to access email accounts, social media, shopping services, and other accounts stored in the browser.
Malwarebytes also found that the file offered as a fake GTA 6 installer is only about 1.1 MB in size. That size is highly implausible for a modern AAA game with extensive graphics and content.
Users therefore need to be cautious of offers for demos, early access, or GTA 6 files originating from unofficial sites. Enthusiasm for popular games is often exploited by cybercriminals to create imitation sites resembling official pages.
Rockstar Games itself lists official GTA VI information on its website and states that the game will arrive on 19 November 2026 for PlayStation 5 and Xbox Series X|S.
Malwarebytes advises users who have downloaded and run suspicious files to assume that login information and browser sessions on the device may have been compromised.
Steps that can be taken include scanning the device using trusted security software. Password changes should also be carried out from a clean device, especially for important accounts such as email and financial services.
Users can also log out of all active sessions on accounts where possible, check connected devices, and enable two-factor authentication. However, Malwarebytes cautions that the theft of session cookies or tokens can pose a particular risk because, under certain conditions, stolen sessions can be misused.
This case serves as a reminder that users should not be easily tempted by offers to download games that are not yet officially available. For GTA VI, official information and access should only be obtained through Rockstar Games’ official channels or designated official digital stores.