# Fake PS5 emulator repositories on GitHub deliver password-stealing malware

- URL: https://talkfuse.com/story/fake-ps5-emulators-on-github-are-spreading-password-stealing-malware/
- Published: 2026-10-28T17:10:09+00:00
- Updated: 2026-10-28T17:29:46+00:00
- Original publisher: Engadget
- Original article: https://www.engadget.com/2299912/fake-ps5-emulators-on-github-are-spreading-password-stealing-malware/
- Topics: Cybersecurity, Technology

## Key points

- Fake PS5 emulator downloads on GitHub can steal passwords.
- The malware reportedly evades Defender and removes its files.
- Check project links and keep antivirus protection enabled.

## Summary

NordVPN researchers say fake PlayStation 5 emulators on GitHub are being used to distribute malware that steals passwords and other personal data. The disguised downloads may deceive users seeking emulation software, putting their accounts and information at risk.

The malicious repositories imitate the Kyttyps5 and AnyPS5 projects. According to NordVPN, the malware adds exclusions to Microsoft Defender, deploys an infostealer and then deletes its own files; users are advised to check that download links are genuinely connected to the project teams and to keep antivirus protection enabled.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.