Connect your Claude, Codex or OpenClaw for full transcripts on millions of podcasts. Two week free trial, cancel anytime.
Start free trial →CyberWire Daily · Software Engineering & Infra · November 2026
Matt Poto walks through the ransomware hidden in a fake GTA 6 installer. It encrypts small files and overwrites large ones, so it acts as a wiper with no way to pay for recovery.
Yep, you got it.
Take us through that.
Sure. So chaos is, again, another known ransomware variant. This one specifically, it would, you know, when you install it, it would find files that were smaller than 200 megabytes and it would create a password and it would encrypt them with that password, each file having its own unique password. Anything over 200 megabytes was written with just random data so that it would effectively destroy them. And then they put up a ransom note that just says your files have been encrypted and we don't want anything. Your files have been destroyed forever.
So no opportunity to pay some more money and get the files back.
Yep. Yeah. This specific variant I found was just trying to inflict maximum damage, it seems.
Wow. Now, one of the interesting details is that the installer also drops the Yandex browser. Why do you suppose that was included as well?