Fake PS5 emulators on GitHub are spreading password-stealing malware
This is according to the threat research arm of NordVPN.
Fake PS5 emulators circulating on GitHub are spreading malware designed to steal passwords and other personal data, according to NordVPN's threat research team. The malicious software disguises itself as legitimate emulation tools to trick users into downloading it. Popular emulators such as Kyttyps5 and AnyPS5 are being exploited by cybercriminals.
NordVPN's Chief Technology Officer Marijus Briedis warns that emulation enthusiasts often download experimental software from GitHub without hesitation, making them easy targets for the scheme. The malware operates by adding exclusion rules to Microsoft Defender, preventing it from being detected by antivirus software. It then downloads an executable file believed to be an infostealer that captures sensitive information.
Once the malicious software has completed its task, it runs a cleanup script to delete its own files, leaving the user unaware of the breach. To avoid falling victim to this scam, users should verify the authenticity of the GitHub link they are downloading from and be cautious of newly created repositories with few reviews. Disabling antivirus software during the download and installation process is also strongly discouraged.
Sony recently announced it will no longer officially port its first-party games to PC, potentially fueling the popularity of such emulators.
Written by urgent.news from Engadget's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
