Netcraft posted on X on 10 November 2026 a warning about Grand Theft Auto VI scams. Its linked research says gta6thapk[.]com offers a "GTA 6 APK" beta and tells users to allow installs from unknown sources, gta6world[…
Source: x.com · published
Netcraft posted on X on 10 November 2026 a warning about Grand Theft Auto VI scams. Its linked research says gta6thapk[.]com offers a "GTA 6 APK" beta and tells users to allow installs from unknown sources, gta6world[.]live puts fake iOS, PC and Android versions behind a "human verification" step that pushes visitors into offers asking for an email and other personal details, and near-identical "GTA 6 APK" pages run at gta6[.]io[.]in, gta6apks[.]in and gta6mobile[.]com[.]in, with gta6mobile[.]app linking to an APK on a separate file site. Netcraft's research, linked from the post, was published on 3 November 2026 and covers domains first seen between July and late October. Rockstar Games is the brand being misused and is not involved. Rockstar has announced GTA VI only for PlayStation 5 and Xbox Series X|S on 19 November 2026 and has not announced a PC or mobile version, so any PC key, mobile APK or early download offered outside the official PlayStation and Xbox stores should be treated as fake.
Look-alike "GTA 6 APK" pages target people who want the game on a phone. According to Netcraft, gta6thapk.com tells users to allow installs from unknown sources, which bypasses official store checks, and gta6world.live puts supposed iOS, PC and Android versions behind a "human verification" step that pushes visitors into offers asking for an email and other personal details. Near-identical pages ran at other gta6 APK addresses, with gta6mobile.app linking to an APK on a separate file site. Installing those files can put malware on the phone; completing the offers can also expose personal data and start unwanted subscriptions.
Rockstar has announced GTA VI only for PlayStation 5 and Xbox Series X|S on 19 November 2026 and has not announced a PC or mobile version, so any PC key, mobile APK or early download offered outside the official PlayStation and Xbox stores should be treated as fake. Rockstar Games is the brand being misused and is not involved. Netcraft's research, linked from the 10 November 2026 post, was published on 3 November 2026 and covers domains first seen between July and late October.
Public post on X, 10 November 2026: https://x.com/Netcraft/status/2120183573156139313
The indicators come from this source and have not been independently checked by scammers.com.
Security researcher @masaomi346 posted on X on 12 November 2026 about Android malware impersonating Rakuten (楽天), the Japanese e-commerce and financial services group, linking a VirusTotal analysis of the sample. The…
PhishDestroy posted on Mastodon on 12 November 2026 that xxvv435[.]weebly[.]com is a phishing page. Its record describes an Onet Poczta login page with email and password fields, flagged by 19 of 92 VirusTotal engines…
PhishDestroy posted on Mastodon on 12 November 2026 that xncok12[.]weebly[.]com is a phishing page. Its record describes a GMX.NET-branded email and password login form, flagged by 17 of 92 VirusTotal engines. GMX is…
PhishDestroy posted on Mastodon on 12 November 2026 that promogiftwinter[.]com is a phishing site. Its record shows a page titled "Steam, The Ultimate Online Game Platform" offering a Steam-branded $50 gift card with…
PhishDestroy posted on Mastodon on 12 November 2026 that xfinitywebmailw3r[.]weebly[.]com is a phishing page. Despite the Xfinity name in the address, its record describes a Network Solutions-branded webmail login for…
PhishDestroy posted on Mastodon on 12 November 2026 three Weebly-hosted pages it flagged as phishing: zimbfree[.]weebly[.]com, zimbrafree9[.]weebly[.]com and zim-update2025[.]weebly[.]com. Its records describe Zimbra-…