Fake PS5 emulators on GitHub hide a password stealer that switches off antivirus checks and erases itself, so a bad download could cost you your logins.
Fake versions of PlayStation 5 emulators on GitHub are carrying malware that steals passwords, according to the threat research team at NordVPN. The fake pages copy two real projects, Kyttyps5 and AnyPS5.
An emulator is a program that lets a computer run games made for another device. GitHub is a site where people share software code. NordVPN says the fake pages look like the real projects. Once the file runs, it tells Microsoft Defender to skip it, so the antivirus never scans it. Then it drops a program NordVPN believes is an infostealer, which grabs passwords and other personal data. Last, a cleanup script deletes the malware's own files. The owner may never know it ran.
NordVPN's CTO, Marijus Briedis, said emulation fans are a perfect target because they are used to running unsigned files from GitHub, so nothing feels suspicious.
PC users who download these emulators from GitHub are the ones at risk. Interest may be high because Sony said earlier this year it would stop officially porting its first party games to PC. That could explain the popularity of emulators like Kyttyps5. If you do not download software from code-sharing sites, this campaign is not aimed at you.
The alert box above lists the steps to take. The one to remember is simple: never turn off your antivirus to get a download to work.
The report does not say how many people were infected or who is behind the fake pages. The two named emulators were the ones affected as of this writing, so more copycats could appear.
Only download emulators from a link the real project team confirms, and never switch off your antivirus to get a file to run.
A user says Anthropic's Claude Code put his email in web requests, then scam messages arrived. The link is unproven, but it shows what AI tools can share.
Read more: User says Claude Code sent his email address to websitesA viral ChatGPT prompt turns what the chatbot remembers about you into a room image. Posting it publicly could give scammers clues to target you.
Read more: Viral ChatGPT room image could hand scammers clues about youA message saying your Amazon account was hacked is often the scam itself. Checking in the Amazon app first can protect your card, gift balance and phone.
Read more: If Amazon says your account was hacked, check before you call
