Fake 113GB GTA VI ISO on torrent sites is malware, testers say
A fake 113GB GTA VI ISO circulating on torrent sites is reportedly 99.99% empty data with a 50KB malware payload, targeting leak hunters.
Online researchers who examined the file report that roughly 99.99% of its size consists of empty zeroes, with only about 50KB of actual data identified as malware. The oversized file was likely designed to look like a genuine build of the highly anticipated game while concealing code that could compromise a user's computer.
According to a researcher on X who goes by @Aidas29506493, the ISO is "fully fake and full of viruses." The analyst said reverse engineering confirmed the file was not a real game release, and that its massive size was intended to make it seem trustworthy.
The malware is said to include commands that can weaken Windows security tools. Reports indicate it attempts to disable Windows Defender, add the system drive to Defender's exclusion list, and terminate security software processes, potentially leaving an infected machine with fewer protections.
The appearance of this fake ISO follows renewed interest in GTA VI leak material, including claims of a complete game build. A leaker known as Cyberleek has reportedly shared gameplay footage and a map called Leonidas, while also making demands of Rockstar Games. In response, Take-Two Interactive has reportedly sought information from Microsoft to identify users connected with Discord servers linked to leaks.
Security observers note that the heightened attention around unofficial GTA VI files creates opportunities for criminals to distribute convincing fake downloads. Users who download such files may expose passwords, personal documents, browser data, and other sensitive information if the malware executes successfully.
Rockstar has scheduled the official release of Grand Theft Auto VI for November, providing players a legitimate alternative to unofficial copies. Until then, claims about leaked builds and ISO files should be treated with caution, as the authenticity of such files cannot be independently confirmed.
The details of the malware's behavior come from a small number of online testers, and independent verification of every technical claim has not yet been completed.