Cybersecurity company Malwarebytes reports that a website is disguising itself as a countdown and "leaked version" sales page for GTA 6, priced at $50 or 1 SOL, luring visitors to connect their crypto wallets and approve malicious transactions.

The official game release date is set for November 19 on PlayStation 5 and Xbox Series, with no announcement for a PC version yet. The page mixes real release information and claims that other leak sites are scams. Analysis indicates that the site contains two sets of code: one targeting Solana wallets, which does not consider the price and prepares to transfer most funds while leaving a small fee; the other is a script of about 2.4MB that can enumerate assets and stablecoins on Ethereum, Polygon, BNB Chain, Avalanche, Arbitrum, Base, Fantom, etc., returning to the operator and prompting pending approval transactions. Simply connecting a wallet is usually not enough; the danger lies in subsequent transfers or token authorizations. The script checks the source of access before triggering and avoids certain countries. Malwarebytes recommends rejecting any site selling GTA 6 leaked versions, verifying authorizations before approval, and refusing requests to transfer the entire balance or unlimited token permissions.

The price is bait, with the loss limit being the assets that can be authorized in the wallet. Various GTA 6-themed scams have emerged this year. Misspellings and contradictions regarding the PC version are identification points.

Demand for piracy has been rewritten as authorization phishing. The "authorization" on the wallet pop-up is more expensive than "paying $50".

In market mechanics, the buyer is a visitor wanting to play the game early, while the seller is the scammer deploying wallet-draining scripts. The driving force is the major game release schedule and leak rumors, constituting a criminal event. Stolen assets are immediately exchanged and laundered. Beneficiaries are companies selling security software and on-chain monitoring, while the pressured party is retail wallet users accustomed to one-click authorizations in browsers.

Source: Public Information