GTA 6 Fake Leak Malware Disguised as ISO Package Hits Users

Fresh GTA 6 leak chatter has drawn more than just curious fans—bad actors have started pushing malware disguises tied to the hype, turning “playable” files into dangerous traps. One of the most recent incidents involves a fake build that appeared online over the weekend, only to be identified as a virus-laden ISO package designed to interfere with users’ defenses.

How the “playable” GTA 6 file turned into malware

A supposedly playable GTA 6 version surfaced over the weekend and was presented as the same build associated with the leak operator “Cyberleek.” The download was a large ISO image—113 GB—likely to make the package seem more legitimate at a glance.

• The ISO contained a virus of roughly 50 KB, with the rest of the 113 GB largely filled with empty data.
• During installation, the program disables Windows Defender by placing the entire C:\ drive into its whitelist.
• The threat can operate freely unless users have additional antivirus protection installed beyond Windows Defender.
• The malware is also disguised using “.doi” files originating from another recently packed game.
• It includes a small set of assets taken from the earlier GTA 6 leak from 2023.

Cyberleek’s leak spree and the shift to threats

Cyberleek has been driving attention around GTA 6 leaks for days. The activity began with the purported release of upcoming-game material, and the leaker later escalated by threatening to publish the entire GTA 6 build.

As the situation developed, the latest “playable” release was quickly uncovered by users via social platforms, which helped expose the malware behavior and the Defender-disabling tactic before it could spread widely.

Legal pressure builds as Take-Two moves to identify the source

The leak fallout is now pulling in major platform providers as well. Take-Two has sought court orders compelling Microsoft and Discord to hand over data intended to identify the individuals behind the leaks.

• Take-Two issued a legal order for Microsoft and Discord to provide data related to the leak perpetrators.
• Rockstar leadership and staff are reported to be upset about the leaked materials.
• Staff concerns include the fact that this is the second major leak during GTA 6’s development period.
• Employees also fear additional, stricter security measures as a result of the repeated breaches.

What this means for fans downloading “leaks”

Beyond the obvious risk of downloading unverified game builds, the latest case highlights a specific threat pattern: oversized “authentic-looking” packages containing tiny malicious payloads that manipulate system defenses at install time. With the file itself designed to reduce Windows Defender’s protection, users who search for “playable” versions are also putting their PCs at immediate risk if they proceed without strong, independent security tools.