Reported by 2 outlets
Fake GTA 6 Demo Sites Deliver Vidar Stealer via Browser Session Hijacking
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.20 / 2.0 · best outlet weight
- Severity
- 0.50 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.58 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
Fake GTA 6 Demo Sites Spread Vidar Stealer to Hijack Authenticated Browser Sessions
gbhackers.com · 49d ago · August 25th, 2026
Cybercriminals are capitalizing on renewed interest in Grand Theft Auto VI by pushing fake Rockstar Games pages that advertise a non-existent GTA 6 demo but instead deliver the Vidar information stealer. The campaign targets browser credentials, session cookies, and other profile data that can let attackers access accounts even after victims change their passwords. The […] The post Fake GTA 6 Demo Sites Spread Vidar Stealer to Hijack Authenticated Browser Sessions appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .
-
update from cyberpress.org
Vidar Uses Victims’ Own Browsers to Extract Data Protected by Browser Encryption
cyberpress.org · 49d ago · August 25th, 2026
Cybercriminals are abusing Grand Theft Auto 6 hype to distribute Vidar infostealer malware through fake Rockstar Games websites. The sites promote a non-existent GTA 6 demo and use convincing “Play Now” buttons to push a malicious file named gta6_installer.exe. The campaign appeared shortly after leaked GTA 6 footage and maps began circulating online. Attackers used the increased interest in unofficial game builds, leaked clips, and early-access offers to attract victims searching online. Rockstar has not released a GTA 6 demo, beta, downloadable PC build, or early-access installer. The game is scheduled for release on November 19, 2026, for PlayStation 5 and Xbox Series X|S. Its August 27 Extended Look is a video presentation, not a playable download. The fake websites copy Rockstar artwork and the legitimate Extended Look promotion. However, their download buttons deliver a 1.1 MB executable. That file size alone should raise alarms, as a modern AAA game cannot fit into a file of that size. Vidar Bypasses Browser Encryption The downloaded executable is Vidar, a malware-as-a-service information stealer used by cybercriminals to collect valuable data from infected Windows devices. The sample targeted saved passwords, browser cookies, session tokens, browsing history, download records, autofill data, and credentials stored by FTP clients . The site copies Rockstar’s genuine Extended Look promo, but adds a fake “Play Now” button (Source: malwarebytes) It also searched for profi