Fake GTA 6 Infostealer Can Bypass MFA via Browser Session Token Theft

Malwarebytes reports that a fake GTA 6 installer, "gta6_installer," steals browser cookies and active session tokens, enabling attackers to replay authenticated sessions without triggering an MFA prompt. No legitimate GTA 6 demo exists; the campaign exploits anticipation around the game's November 19, 2026 release and a Netflix first look in late August. Session-token replay remains effective because tokens persist client-side.