Story perspectives

NordVPN Warns of Fake PS5 Emulators Spreading Infostealer

By Drooid · Oct 29, 2026 · How we work

Read the story

Story summary

Summary

GitHub hosted malicious repositories disguised as AnyPS5 and Kyttyps5 emulators spread infostealer malware, NordVPN reported.
It captures passwords and other sensitive data as an infostealer.
It adds exclusion rules to Microsoft Defender, preventing antivirus scans of the malicious files.
After infection, a cleanup script deletes the malware’s files, leaving no trace on the PC.
Self-signed certificates and daily repo rotation indicate an automated campaign targeting PS5 emulation fans.

1 of 1

GitHub hosted malicious repositories disguised as AnyPS5 and Kyttyps5 emulators spread infostealer malware, NordVPN reported.
It captures passwords and other sensitive data as an infostealer.
It adds exclusion rules to Microsoft Defender, preventing antivirus scans of the malicious files.
After infection, a cleanup script deletes the malware’s files, leaving no trace on the PC.
Self-signed certificates and daily repo rotation indicate an automated campaign targeting PS5 emulation fans.