Cybercriminals are capitalizing on the excitement surrounding the upcoming release of Grand Theft Auto VI to distribute malware disguised as leaked game files This article explores named gta6installer exe. . Fake GTA 6 ISO downloads, promoted through search results, torrent sites, gaming forums, and social media, are delivering password stealers, remote-access trojans (RATs), and file-wiping malware.
Malicious ISO Contains GTA 6 Scam The malicious ISO includes a file named gta6installer.exe, which mimics the GTA 5 icon to appear legitimate. After running, it drops multiple files into the Windows %TEMP% directory, including executables named rockstar.exe, steam.exe, licensechecker.exe, gta6.exe, and adminapp.exe. It then launches several malware components. NJRAT can log keystrokes, steal browser credentials, capture screenshots, access webcams, download or upload files, modify the registry, and collect cryptocurrency-related data.
It includes features like screenshot capture, clipboard monitoring, mouse control, registry access, audio device discovery, and window tracking. Changes to the desktop wallpaper (Source: Huntress) target Chrome passwords and cookies, Discord tokens, Roblox Studio cookies, Minecraft session data, Windows product keys, screenshots, system details, IP addresses, and location information. Indicators of Compromise (IOCs) IOC Type Indicator Details / Malware Association File Gta6installer.exe Initial fake GTA 6 installer executable MD5 a15e280a3fd65dfaa243bbe2dbf45e97 Hash of Gta6installer.exe Unlock 58% more threats with cutting-edge intelligence from 16,000+ organizations.
