Beware! Fake GTA 6 Build Hides Malware Inside a 100GB Download
3 min. read 
Published on
Fake GTA 6 playable build downloads circulating online are not legitimate copies of Rockstar’s upcoming game. Researchers who analyzed the files found malware hidden inside a package padded to more than 100GB.
The discovery follows a week of GTA 6 leaks and claims that someone had obtained a playable build of the game.
The download claimed to contain the same GTA 6 build allegedly used by Cyberleek to produce recent leaks. However, researcher @Aidas29506493 decompiled and reverse-engineered the files and concluded that the package was fake.
Instead of GTA 6, the download contains malware designed to weaken Windows security.
Fake GTA 6 build is mostly empty data
The supposed GTA 6 ISO exceeds 100GB, which makes it look like a believable modern game installation.
Researchers reportedly found that the actual malicious payload measures only around 50KB. Most of the remaining file consists of empty padding and zeroes added to inflate the download size.
That padding gives the package the appearance of a full game build without containing anything close to a playable version of GTA 6.
Malware can disable Microsoft Defender protection
The decompiled code reportedly includes a PowerShell command that adds the entire C:\ drive to Microsoft Defender’s exclusion list.
That change prevents Defender from scanning files stored across the system drive.
The installer also reportedly includes commands that attempt to terminate security software. Once attackers disable those protections, additional malware can run with far less interference.
Other researchers examined the files without running the installer and reportedly reached similar conclusions.
Files were disguised as a GTA 6 repack
The package also includes .doi files associated with DODI Repacks, although researchers traced them to another game.
A small number of assets connected to a 2023 GTA 6 leak also appear inside the package. Those files likely help make the fake build look more convincing to anyone inspecting the download.
The combination of leaked assets, repack-related files, and a massive ISO size creates the appearance of a genuine stolen game build.
GTA 6 leak hype gives malware distributors an opening
The fake build surfaced while interest in GTA 6 leaks remains particularly high, giving malware distributors an easy way to attract potential victims.
Users should avoid supposed leaked GTA 6 builds, especially installers and executable files distributed through unofficial sources.
Take-Two has already been taking down GTA 6 gameplay videos and has sent subpoenas to Microsoft, Google, and Discord as it investigates recent leaks.
Via TechPowerUp
Read our disclosure page to find out how can you help Windows Report sustain the editorial team. Read more
Improve this guide
User forum
0 messages