With GTA VI leaks popping up from the likes of Cyberleek the entire week prior, it’s not surprising to see claims of a leaked playable build of GTA VI pop up online. One such supposed build claiming to be the very same playable GTA VI build being used by Cyberleek for their leaks popped up recently, but it was quickly shown to be fake by an online sleuth who decompiled and reverse engineered the game to verify its contents.
As it turns out, the “game” ISO contained a 50 KB virus that was wrapped in over 100 GB of empty code to make it seem like a working game file. It’s unclear what the attack method is from the post shared by the @Aidas29506493, but it is confirmed that the installer effectively disables Windows Defender with a command that whitelists the whole C:\ drive when the installer is run. From there, malware could run basically unimpeded, as long as the user doesn’t have any other antivirus software installed.
@Aidas29506493 on XThe decompiled bytecode literally contains commands to whitelist the entire C:\ drive in Windows Defender (powershell Add-MpPreference -ExclusionPath %SystemDrive%\) and kill security software (taskkill -f).
It’s not 100 GB of actual code—it’s just a tiny 50 KB virus padded with 99.99% empty junk (literally endless zeroes).
Other users have since corroborated @Aidas29506493’s claims by downloading and digging through the game files without actually running or installing any of the files. They found that the “game files” also contain disguise the virus with .doi files from another repacked game, and there are a handful of assets from a 2023 leak of GTA VI.@bkinoq on XIt’s fake, the setup is 1 GB (to get past VirusTotal) and it uses.doi files which are from DODI Repacks (of another game, ofc)