GoKawiilNordVPN finds fake PS5 emulators on GitHub stealing passwords
NordVPN's Threat Intelligence team identified malicious GitHub repositories posing as popular PS5 emulators like Kyttyps5 and AnyPS5. Once downloaded, the malware disables Microsoft Defender scanning, deploys an infostealer to harvest passwords and personal data, then deletes its own traces. NordVPN CTO Marijus Briedis says the fake software is designed to appear legitimate to emulation enthusiasts who routinely run unsigned files.