Kyttyps5

Malware disguised as PS5 emulators AnyPS5 and Kyttyps5 steals passwords via fake GitHub repos

NordVPN's Threat Intelligence team found malicious GitHub repositories impersonating the popular PS5 emulation tools AnyPS5 and Kyttyps5, tricking users into downloading a zip file with a Windows executable that steals passwords. The malware checks for signs of a sandbox or virtual machine before activating, adds exclusion rules to Microsoft Defender to avoid detection, and runs a cleanup script two minutes after infection to erase its traces.