Skip to content

This article features deals sourced directly by Gizmodo and produced independently of the editorial team. We may earn a commission when you buy through links on the site.

Deals

Fake GTA 6, real malware: the new scam targeting Windows and Android

For several weeks now, multiple waves of fake GTA 6 betas have been circulating online, specifically targeting Windows and Android users. Under the guise of early access to 2026's most anticipated game, attackers are pushing malware and trojans onto unsuspecting machines. NordVPN, which now ships a next-generation antivirus inside its subscription, is flagging this attack pattern and blocking it at the file analysis stage.
By

Reading time 3 minutes

How the fake GTA 6 beta scam actually works

The playbook is consistent. Attackers spin up sites that mimic Rockstar Games’ visual identity or popular gaming storefronts. Access to a so-called private beta is then pushed through Discord servers, YouTube videos, or niche gaming forums. The link points to either a Windows installer (.exe) or an Android APK presented as the official client.

Once executed, the file actually installs a trojan that opens a backdoor on the machine. Depending on the variant observed, the payload ranges from credential stealers (browser-saved passwords, game session tokens, banking logins) to cryptominers that silently exploit your GPU in the background. On Android, some versions even intercept SMS messages to bypass two-factor authentication.

Block these malwares before installation

Why highly anticipated games have become a top target

Attackers have figured out a simple psychological mechanism: waiting for a major release lowers gamers’ guard. When a title has been hyped for years, the promise of early access suspends the usual instincts of caution. People click faster, temporarily disable their antivirus because it “blocks the download,” accept warnings from Windows SmartScreen they would normally refuse.

GTA 6, set for a fall 2026 release, checks every box on the jackpot list: massive audience, impatient community, presence on both Windows and Android through emulators. The fake beta waves started well ahead of the actual launch and will only intensify in the coming weeks. The golden rule remains straightforward: no beta exists outside Rockstar’s official program, and anything circulating on the side should be treated as suspicious by default.

Turn on the next-gen antivirus

How NordVPN’s built-in antivirus intercepts these files

As of May 27, NordVPN evolved its security module, now branded as a next-generation antivirus. Concretely, the tool scans every file downloaded onto the device in real time, whether it comes from a browser, a torrent client, or a messaging app. If the file’s signature matches a known threat or its behavior triggers a heuristic alert, the download is interrupted before execution.

The service also includes anti-scam protection that blocks access to known phishing sites, including those impersonating Rockstar Games or the official Steam and Epic Games Store portals. For a gamer, the practical effect is immediate: even after clicking a poisoned Discord link, the browser refuses to load the malicious page and the download never completes.

Protect Windows and Android with NordVPN

The Premium plan combining VPN and antivirus at $3.85/month

NordVPN’s Premium plan bundles the full VPN, the next-generation antivirus, data breach alerts, anti-spam and anti-scam call protection, and a password manager. The promotional pricing comes in at $3.85/month, or $107.73 billed once for 28 months of service (24 + 4 free), with a 78% discount off the $12.12/month reference rate.

To put this price in context: a premium consumer antivirus typically sells between $40 and $80/year as a separate subscription, and an equivalent VPN runs $4 to $7/month. The Premium bundle works out to under $50/year for both services combined. Annual renewal then continues at the standard rate, cancelable from the account dashboard at any time.

Get the Premium plan at $3.85/month

On the test bench: our numbers on a US gigabit line

On a 1 Gbps fiber line in New York, NordLynx establishes a connection to a US East server in under 2 seconds. Measured ping stays below 20 ms on nearby servers, which comfortably supports competitive gaming and 4K streaming running side by side without any visible hitches. Running the antivirus in parallel did not noticeably degrade speeds during our test sessions on multi-gigabyte downloads.

On distant servers like Tokyo or Sydney, latency climbs to between 120 and 200 ms. That’s fine for streaming or accessing geo-restricted sites, but more limiting for high-intensity online gaming. Worth noting: the antivirus is more fully featured on Windows and macOS than on mobile versions, where some real-time analysis layers are constrained by operating system restrictions.

Try NordVPN on your own connection

30 days to confirm the purchase or get your money back

The deal includes a 30-day money-back guarantee. The refund is full, no justification required, and the request goes through 24/7 chat support. Funds typically return within 5 to 10 business days depending on the payment method used.

You effectively get a month to confirm that the antivirus actually blocks the threats you encounter day to day, that the VPN holds speeds on your home connection, and that the apps cover your Windows and Android devices. A note on the subscription: the $3.85/month rate applies to the first 28 months. Auto-renewal then kicks in at the standard annual rate. If you’d rather renegotiate or cancel before renewal, set a reminder in your calendar 7 to 10 days before the renewal date.

Activate the 30-day guarantee

Share this story

Sign up for our newsletters

Subscribe and interact with our community, get up to date with our customised Newsletters and much more.