Security experts have warned of a scam campaign distributing malware through GitHub repositories disguised as PlayStation 5 emulation software for PC. NordVPN's Threat Intelligence research team identified the operation, which targets gamers eager to play PS5 titles on their computers.
The scammers leverage two prominent emulator projects, presenting them as functional PS5 emulators. The malware employed in this campaign features advanced anti-analysis techniques to evade detection, adds itself to Windows Defender exclusions, and deletes its own traces post-infection, according to NordVPN.
This tactic capitalizes on a surge in interest surrounding PS5 emulation on PC, fueled in part by recent demonstrations of PS5 exclusives like Astro Bot and Demon's Souls Remake running on desktop hardware. "Emulation fans are a perfect target," stated Marijus Briedis, chief technology officer at NordVPN. "They are used to downloading experimental software from GitHub and running unsigned files, so nothing about this feels suspicious. But this is not an emulator. It steals your data, hides from your antivirus, and erases its own tracks before you notice anything is wrong."
The rise of these fake emulators coincides with ongoing efforts by the homebrew community to jailbreak the PS5. Sony recently released a new firmware update, which some believe is intended to counter these jailbreaking attempts. This creates a continuous cycle where the homebrew scene works to release exploits for new firmware, only for Sony to release updates that patch these vulnerabilities and bolster security.
Concerns have been raised that if a PS5 jailbreak becomes available for the firmware required by Grand Theft Auto 6, which is set to launch soon, it could potentially lead to the piracy of Rockstar's highly anticipated title on PS5 and possibly its availability on PC.