Fake PS5 emulators spread malware

Fake PS5 emulators containing malicious software have been shared on GitHub, a code-sharing platform, capitalizing on the excitement around the upcoming release of Grand Theft Auto VI. These programs mimic legitimate emulators like KytyPS5 and AnyPS5 but include malware designed to steal sensitive data, such as passwords, from users' computers.

Malware hides from security software

The malicious software can hide from Microsoft Defender by adding exclusion rules that prevent the security software from scanning certain files. After collecting data, the malware runs a cleanup script to erase its presence, making it difficult for users to detect the breach until stolen data is used for unauthorized activities, such as accessing e-commerce accounts.

NordVPN identifies the threat

The cyber threat team at NordVPN discovered these fake emulators and warned that emulation enthusiasts are especially at risk. These users often download experimental software from GitHub and run unsigned files, making them less likely to recognize suspicious activity. Marijus Briedis, NordVPN’s technology head, noted that this behavior makes the malware more effective.

PS5 emulation in legal gray area

PS5 emulation is advancing but remains in a legal gray area. Projects like KytyPS5 are making progress but are not yet fully functional, often facing issues like crashes or poor performance. Despite these challenges, the development of emulators has increased recently, possibly due to Sony’s 2020 acquisition of Nixxes studio and its subsequent shift away from PC platforms.

Sony’s strategy may influence emulator development

Sony’s decision to focus on console development and abandon the PC platform may have encouraged more emulator development. While Sony has not commented on the current situation, it has released several PS5 updates recently. If the emulators become fully functional, Sony could take steps to block their use, though it has not indicated any plans to do so.