With official pre-orders for GTA VI still nowhere in sight, a wave of scams, phishing pages and malware-loaded fake downloads is flooding the web. Security researchers are now warning that the information vacuum around the next Rockstar release has become a perfect playground for cybercriminals.
A coordinated campaign, not random scams
A threat intelligence report published this week documents a broad malware operation that ramped up in mid-May 2026, timed precisely to the community frenzy around the supposed pre-order launch. The pattern is consistent across dozens of newly registered domains:
- A landing page promises exclusive early access or a beta key for GTA VI
- Visitors are asked to enter an email, a Rockstar Social Club login or a platform account
- A second page pushes a fake beta installer for download
- The installer drops a trojan, often disguised as a legitimate component
One analyzed sample from May 17, 2026 masquerades as an Nvidia driver during install and then runs multi-stage PowerShell scripts to exfiltrate browser credentials and crypto wallet data.
Repack scene under attack too
The second wave targets the piracy ecosystem directly. Criminals are abusing the names of well-known repack groups to push tampered installers laced with info-stealers. The technique mirrors a supply-chain attack from early April that compromised a popular hardware tools website, and it has now been recycled for GTA VI bait in a matter of weeks.
The catch nobody seems to mention to the victims: the game does not exist on PC yet. A launch on that platform is expected no earlier than 2027, so any "GTA VI repack" circulating right now is, with near certainty, pure malware.
Android "betas" that cannot exist
Researchers also flagged Android packages labeled as a GTA VI beta. Some contain aggressive adware, others trojans that abuse push notification permissions to funnel users into paid subscription traps. Since the game is confirmed only for PS5 and Xbox Series X|S at launch on November 19, 2026, the mere existence of an .apk build is itself the red flag.
Account takeovers are the real prize
Across all platforms, a recurring goal is hijacking Rockstar Social Club accounts. Phishing pages dangle:
- Exclusive beta keys
- GTA Online items supposedly carrying over into GTA VI
- Early access to the still-unreleased third trailer
High-progress GTA Online accounts with rare vehicles or significant Shark Card history are reportedly traded on grey markets for three-figure sums, which is why this angle keeps getting recycled.
What is actually confirmed
The publisher's CEO reiterated in a post-earnings interview on May 22 that pre-orders will go live alongside the marketing campaign in summer 2026 and openly expressed confusion about the rumors pointing to a mid-May launch. That means:
- No official pre-order page exists yet
- No public beta has been announced or is planned
- The third trailer has not been released
- Any site claiming otherwise is misleading at best
How to stay safe until the real announcement
A few practical rules while the rumor mill keeps spinning:
- Wait for the announcement to appear on verified Rockstar channels and the official PlayStation Store, Xbox Store or Rockstar Games Launcher first
- Treat every third-party pre-order, beta or "leaked trailer" link as hostile
- Watch URLs for typos, unusual top-level domains and obvious squatting patterns
- Never paste a Social Club login into a page reached from a Reddit, Discord or YouTube link
- Remember that a PC build for general distribution simply does not exist right now
What to watch next
The summer marketing window is the only date that matters. Once that kicks off, expect the third trailer, the first concrete pricing information and the actual pre-order go-live to follow in quick succession. Until then, the safest assumption is blunt: if it claims to give you GTA VI early, it is trying to steal something from you.
Sources
