Loading threat actor…
Cyberleek is a self-identified hacktivist-style actor or persona associated with the alleged leak of unreleased Grand Theft Auto VI gameplay footage and a purported full map of the in-game Leonida setting in August 2026. The actor publicly framed the operation as a protest against what it characterized as anti-consumer practices in the video game industry, including digital-only preorders, paid unlocking of single-player content, and ownership models dependent on online services. Cyberleek also threatened further disclosures unless the publisher responded to its demands, indicating coercive pressure tactics tied to public release of stolen or unauthorized material. The activity attributed to Cyberleek is centered on unauthorized disclosure and public dissemination of pre-release game assets rather than financially motivated ransomware deployment. Reported behavior includes leaking gameplay videos, publishing a manifesto to justify the operation, and conducting a broader pressure campaign against a major video game publisher. The actor has also been associated with a cryptocurrency-style token project, but available information does not establish a dominant financial motive with high confidence. No high-confidence evidence in the available reporting confirms Cyberleek’s origin, state affiliation, access vector, possession of internal credentials, or broader operational history beyond the alleged game-content leaks.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
2 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Allegedly leaking GTA VI gameplay clips and the game map as a protest against digital preorders and the lack of physical media.
Leaking alleged unreleased GTA VI gameplay footage and map data, threatening additional releases, and framing the operation as a pressure campaign against perceived anti-consumer practices in the video game industry.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.