A large file circulating online as a supposed Grand Theft Auto VI ISO appears to be fake and potentially malicious, according to Tom's Hardware. The outlet reports that a GTA-focused X user flagged a 113GB download and asked others to verify whether it was a real build of the unreleased game. The user did not say where the file was found, though Tom's Hardware says it was allegedly moving across torrent sites. The malware claim comes from social-media investigators cited by the outlet, not from Rockstar, Take-Two, or a named security vendor. One X user said they performed reverse engineering and concluded the file was fake and infected. Tom's Hardware reports that further analysis by internet sleuths described the file as mostly padding: a roughly 50KB virus embedded inside a 113GB image filled with zeroes. The reported behavior is consistent with commodity malware trying to weaken local defenses. According to Tom's Hardware's summary of the X analysis, the decompiled code included commands intended to add the Windows system drive to Microsoft Defender's exclusion list and to kill security software processes. If accurate, that would let a small payload hide inside a very large file that looks more plausible to people expecting a full game build. The lure is the broader GTA VI leak cycle. Tom's Hardware says the filename made the download seem like a build allegedly in Cyberleek's possession; the outlet says Cyberleek has been releasing GTA VI gameplay and map material. The same report says Cyberleek has tied the leaks to objections over Rockstar's approach to pre-selling digital copies and has threatened to keep releasing material unless the publisher apologizes. Tom's Hardware also reports that Take-Two Interactive has moved to identify the leaker by requesting device IDs from members of three Discord servers. That claim is part of the same single-source account, so the immediate security takeaway is narrower than the broader leak narrative: files marketed as unreleased GTA VI builds should be treated as high-risk unless independently verified. For operators and security teams, the case is a familiar pattern in a high-attention wrapper. A news event creates demand, attackers package malware as scarce media, and file size is used as social proof. Here, the reported padding matters because a 113GB archive may feel more believable to fans expecting a modern AAA game, even if the meaningful executable content is tiny. Who benefits: Attackers benefit from the demand around GTA VI and the appearance of scarcity around alleged leaks. Security teams can use the report as a timely user-awareness example for pirated or unreleased software risks. Who's exposed: Gamers are exposed if they download alleged unreleased builds from torrents. Windows users would be particularly relevant if the reported Defender-exclusion behavior is accurate.