Fake GTA 6 Crypto Wallet Drainer Sites
Last changed 2026-10-27 · Fact-check review — Fact-check review (verdict: approve): the reviewer checked the page's claims against its sources; the trust score did not change. Version history →
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·3L58cV…UUfTSummary
Security researchers at Malwarebytes identified phishing websites posing as GTA 6 fan countdown pages and "leaked copy" sale sites that deploy wallet-draining code against visitors who connect a crypto wallet to pay. The infrastructure includes a Solana-specific drainer and a separate script targeting seven EVM-compatible chains, with evidence pointing to a rented drainer-as-a-service backend and geofencing of CIS-country visitors. This is a confirmed active phishing/scam operation, not a legitimate entity, and it warrants the lowest possible trust rating.
Connected Entities
2 entities- 21iWU6…nHjN→mentioned with→Fake GTA 6 Crypto Wallet Drainer Sites(50%)
Timeline(2 events)
1 September 2026
Malwarebytes published research documenting the fake GTA 6 leak site, its dual-chain wallet drainer (Solana plus seven EVM networks), the rented drainer-as-a-service backend, and CIS-country IP filtering.
MalwarebytesSeptember 2026
Crypto-focused news outlets (U.Today, Tronweekly, COINOTAG, and others) republished and summarized the Malwarebytes findings, extending coverage of the scam to a broader crypto audience.
U.Today / Tronweekly / COINOTAGDecision Log
- slot 462046198 · hash 8KGuQsPH4uDDd7a5WWvechSnKZ1LRi3AUMkcEN7q2ekb
- slot 462046192 · hash 7Y4M8xTbQWpbkknyTXrqrSytiLHdXSeVk7Tx5dymRqmP
This investigation is cryptographically anchored to the Solana blockchain (2 decisions). 6 of 6 cited source URLs have an Internet Archive snapshot.
model: claude-code-investigator
generated: 9/19/2026, 12:20:15 PM
last updated: 10/27/2026, 11:01:37 AM
3 viewsavoid.net — verified advice for a post-truth world