The GTA 6 Leak Is Real. The Download Is Not.
If there is a gamer in your house, this one is worth two minutes.
For the past week a hacker called CyberLeek has been leaking real GTA 6 gameplay in broad daylight, with his own name watermarked on every frame. It is a great story. It has also become the most effective bait on the internet right now.
So here is the part that actually matters, up front: no downloadable copy of GTA 6 has leaked. Not one, not anywhere. Every file claiming to be one is a fake, and nearly all of them are password stealers. The machine they land on is usually a family PC or a work laptop with a browser full of saved logins.
What actually happened
On 18 August, CyberLeek started posting GTA 6 clips and what appears to be the full Leonida map. By the 20th he was plainly playing the game himself rather than re-posting clips he had been sent, at one point shooting the word "Leek" into a wall. That is him with access to it, though. Not a copy anyone else can get hold of. His stated reason is a manifesto about the games industry: no physical disc for GTA 6, digital pre-orders, finished content held back and sold as DLC.
There is money in it too. Every clip advertises a meme coin called $CYBERLEEK, which started trading three days before the first leak went out. So when people called it a scam, he burned the entire developer wallet, around a million dollars' worth, meaning he can never sell it. Then he said so in the watermark of the next leak.
The GTA 6 leaker just burned all devs tokens worth $1 million, which they had in a private wallet to prove they’re not scamming people. They’re currently only collecting trading fees.
Hard not to admire the nerve. He still collects a fee on every trade though, so the leaks keep coming. Take-Two has since subpoenaed Microsoft and Discord to work out who he is, with a deadline of 4 September.
Meanwhile Rockstar has an Extended Look premiering on Netflix on 27 August, and GTA 6 launches 19 November on PS5 and Xbox Series X|S. There is no PC version at launch. Hang on to that one.
The side effect: fake ISOs everywhere
None of this is an organised campaign. It is just what happens when something gets this much attention. Piracy sites, Telegram channels and Discord servers fill up with "playable GTA 6 builds", because uploading a fake ISO costs nothing and somebody always bites. One is a 113.9GB file called grand.theft.auto.vi.gta.6.cyberleek.build.v1.287.0.lucia.repack.iso. Others are encrypted archives where the password only turns up after you complete a survey. There are fake Rockstar launchers, "early access" sites wanting $250 in crypto, and "GTA 6 leaked secrets" pages sitting on hacked university websites so they rank in Google.
🚨 GTA 6 ALERT: A supposed build of the game is reportedly circulating online. DO NOT download it, it is almost certainly a virus/malware! If the leaker had actually uploaded the game, they would have clearly announced it on their official channels. Don’t risk your devices, Show more
None of them are the game. No downloadable build has leaked, and nobody has shown one exists. Even CyberLeek only ever posts clips and map files, never an installer, and has had to watermark his own leaks to shake off the people impersonating him.
The GTA 6 leak that just dropped has a watermark that says “CYBERLEEK DOES NOT HAVE TWITTER” This means that the account who has gained over 100K followers on here over the past 24 hours is fake.
The noise is bad enough that a gaming news site published, then pulled, a story about CyberLeek threatening to release the full build. The image behind it had been manufactured by one of the copycats. If the people covering this full time are getting caught out, a link in a Discord server deserves nothing.
Nearly every one of these fakes asks you to turn your antivirus off before installing. That instruction is the entire scam in one line. If a file needs your defences down to run, the file is the problem.
What is actually in them
Two things, mostly.
Infostealers run once, take your saved browser passwords, session cookies, Steam and Discord logins and crypto wallets, then leave without a word. Session cookies are the nasty part, because a stolen one can get someone into an account without needing the password or the code from your phone.
Remote access trojans stay put, and hand someone else the keyboard whenever they feel like using it.
The usual reply to this is "there's nothing important on that PC." Have a look at what the browser has saved on it. For most people it is the email account, which is the reset button for everything else they own. If it is a work laptop, or a home machine that checks work email, that is the business exposed through a game download.
Worth noticing that the whole saga runs on the same trick. The 2022 GTA 6 leak started with a teenager getting into Rockstar's Slack. A second group this month says it phished a Rockstar employee working from home. And this scam wave works by talking ordinary people into running an .exe. Not a firewall in sight at any stage, just people, same as two thirds of cyber incidents landing on small businesses.
Telling the real thing from the bait
| Real | Bait |
|---|---|
| Rockstar's own channels, and the Netflix Extended Look on 27 August | A Discord DM, Telegram channel, torrent or "mirror" link |
| Clips and screenshots, already free on YouTube | A 100GB+ ISO, an .exe "launcher", or an encrypted archive |
| Nothing to install, ever | "Complete this survey for the password" |
| PS5 and Xbox Series X|S, 19 November | Any "GTA 6 PC build" available right now |
| Costs nothing to watch | $250 in crypto for "early access" |
Same logic we laid out for the phishing emails hitting Perth small businesses: if you did not go looking for it and it turned up in front of you, treat it as guilty until proven innocent.
If someone has already clicked
Do not log into anything on that machine while you sort it out.
- Get it off the network. Wi-Fi off, cable out.
- Change the important passwords from a different device. Email first, then banking. Doing it from the infected machine just hands over the new one.
- Sign out of all sessions everywhere. This is what kills a stolen session cookie. Changing the password alone sometimes does not.
- Turn on multi-factor authentication, especially on email.
- Run a full scan, and know that a clean result is not a guarantee with this kind of malware. For a machine that matters, a wipe and rebuild is the honest answer.
If that is more than you fancy taking on, it is exactly the sort of job we do.
The takeaway
The leak is real and the story is genuinely good. Watch it on YouTube, read about it, argue about the map. All free, all zero risk.
What is not real is a playable GTA 6 sitting on a torrent site three months before launch. The game arrives 19 November on consoles, and the only thing dressed up as an early copy this week is somebody's password stealer in a very good costume. Watch the Netflix Extended Look on 27 August, wait for November, and do not install anything that asks you to switch your antivirus off first.
If something has already been clicked and you are not sure how bad it is, that is a five minute conversation with us, not a problem you need to sit on.
