A sophisticated phishing campaign is currently targeting fans of the upcoming video game GTA 6, exploiting player anticipation to steal their digital assets. Under the guise of a professional-looking website featuring official visuals, cybercriminals are offering the purchase of "leaked" copies of the game. In reality, the portal conceals a formidable wallet drainer: as soon as the page is opened or a transaction is attempted, a malicious script activates to try and empty connected wallets. This technical setup, analyzed by cybersecurity experts, is capable of targeting seven major blockchains, including Ethereum, Solana, BNB Smart Chain, and Avalanche.
The modus operandi relies on a deceptive presentation that misappropriates Rockstar Games' brand image to establish false trust. Although the site boasts polished graphics and credible information regarding the game's release, the text content is riddled with inconsistencies, such as errors in purchase promises or blatant contradictions between the FAQ and the payment buttons. To avoid detection by authorities or security tools in certain regions, the authors integrated a filter named CIS_Protection, which automatically blocks visitors from ten countries in the former USSR. This practice is a common signature within the Russian-speaking cybercrime ecosystem, although it is not enough to formally identify those responsible.
The stakes are considerable, with losses linked to these scam kits estimated at several hundred million dollars worldwide for the year 2024. The danger does not lie in simply connecting the wallet, but in signing malicious transactions that the script generates dynamically. These requests seek either a direct transfer of the entire balance or long-term access authorization to the victim's tokens and NFTs. Caution is therefore advised: no official gaming platform requires connecting a crypto wallet to acquire a title, especially since Rockstar has not yet announced a PC version.
In the face of this threat, vigilance remains the best defense. In the event of suspicious activity, it is imperative to immediately revoke granted permissions via specialized services and transfer remaining funds to a new, secure wallet. One should also be wary of "fund recovery" services that promise, for a fee, to return stolen assets—a tactic that often constitutes a second scam attempt. The release of this highly anticipated game, scheduled for next November, will continue to attract the attention of fraudsters; only the strict use of official sales channels provides protection against these digital theft maneuvers.