Fake GTA 6 Demo Spreads Malware: How to Spot the Scam

A network of impersonating Rockstar Games sites is distributing a tiny executable named gta6_installer.exe that Malwarebytes identified as the Vidar information-stealer. The malware harvests browser-stored credentials, cookies, session tokens, browsing history, autofill data, and FTP credentials across many browsers and applications, enabling account takeover even when two-factor authentication is present; victims should assume credentials may be compromised, scan and clean infected devices, and change passwords from a clean device.