Fake GTA 6 Leak Wallet-Drainer Campaign
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·eyZUA7…taZ6Summary
A live phishing campaign, first documented by Malwarebytes on September 1, 2026, impersonates a fan countdown site for Rockstar Games' Grand Theft Auto VI and offers a 'leaked' pre-release copy for $50 or 1 SOL. Behind the payment flow, the site runs two malicious wallet-drainer scripts — one built specifically for Solana and a separate multi-chain tool covering Ethereum, Polygon, BNB Smart Chain, Avalanche, Arbitrum, Base and Fantom — that empty a connecting wallet down to fee-covering dust once a user approves a transaction. Rockstar Games and its parent Take-Two are impersonated brands and are not implicated in any wrongdoing; GTA 6's confirmed retail launch is November 19, 2026, meaning any offer of a playable 'leaked copy' before that date is fraudulent by definition.
Connected Entities
1 entities · 10 linked investigationsTimeline(5 events)
August 2026
Malwarebytes separately reports a distinct wave of fake GTA 6 'Extended Look' and demo sites delivering an infostealer, an earlier and different campaign exploiting the same GTA 6 hype.
Malwarebytes1 September 2026
Malwarebytes publishes research identifying a fake GTA 6 leak site running Solana-specific and multi-chain EVM wallet-drainer scripts, disguised as a fan countdown page offering a 'leaked copy' for $50 or 1 SOL.
MalwarebytesSeptember 2026
Crypto and tech outlets including TronWeekly, U.Today, CoinoTag and CoinGabbar republish and expand on the Malwarebytes findings, confirming the multi-chain scope (Ethereum, Polygon, BNB Smart Chain, Avalanche, Arbitrum, Base, Fantom) and cataloguing additional red flags on the site.
TronWeeklySeptember 2026
AVOID.NET investigation attempts to verify whether the reported phishing domain is still live; automated access attempts return an HTTP 403 response, an inconclusive result that neither confirms the site is down nor that it is actively serving the drainer.
AVOID.NET investigationNovember 2026
Confirmed retail launch date for Grand Theft Auto VI, per Take-Two Interactive and Rockstar Games' public statements — the benchmark against which any pre-release 'leaked copy' offer can be judged fraudulent.
ForbesDecision Log
- hash: 4T3uKwCAPPsswzukn5MKs8w9CzNJCTNizn8NPCMesw4W
This investigation is cryptographically anchored to the Solana blockchain (1 event). 0 of 4 cited source URLs have an Internet Archive snapshot.
model: claude-code-investigator
generated: 9/9/2026, 1:53:10 AM
last updated: 9/9/2026, 1:53:26 AM
avoid.net — verified advice for a post-truth world