{"id":17654,"date":"2020-12-07T14:35:11","date_gmt":"2020-12-07T10:35:11","guid":{"rendered":"https:\/\/me-en.kaspersky.com\/blog\/cyberpunk-2077-scam\/17654\/"},"modified":"2020-12-07T14:36:48","modified_gmt":"2020-12-07T10:36:48","slug":"cyberpunk-2077-scam","status":"publish","type":"post","link":"https:\/\/me-en.kaspersky.com\/blog\/cyberpunk-2077-scam\/17654\/","title":{"rendered":"Cyberpunk 2077 free download hoax"},"content":{"rendered":"<p>One of the most eagerly awaited games of the year, <em>Cyberpunk 2077<\/em>, is set for release in December 2020. As gamers count down the days, scammers are using the window to cash in. We found several websites supposedly giving away <em>Cyberpunk 2077<\/em>. Alas, visitors are sure to be disappointed, or worse.<\/p>\n<h2>How the Cyberpunk 2077 scam works<\/h2>\n<p>The websites we found are all very similar, differing mainly by language and corresponding top-level domain. The URLs contain words such as PC, games, and download in the language of the site.<\/p>\n<div id=\"attachment_37914\" style=\"width: 1470px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/12\/07143519\/cyberpunk-2077-scam-screen-1.png\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-37914\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/12\/07143519\/cyberpunk-2077-scam-screen-1.png\" alt=\"One of the fake sites in Italian\" width=\"1460\" height=\"850\" class=\"size-full wp-image-17655\"><\/a><p id=\"caption-attachment-37914\" class=\"wp-caption-text\">One of the fake sites in Italian<\/p><\/div>\n<div id=\"attachment_37915\" style=\"width: 1470px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/12\/07143529\/cyberpunk-2077-scam-screen-2.png\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-37915\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/12\/07143529\/cyberpunk-2077-scam-screen-2.png\" alt=\"Website in German, with a large Herunterladen (Download) button\" width=\"1460\" height=\"850\" class=\"size-full wp-image-17657\"><\/a><p id=\"caption-attachment-37915\" class=\"wp-caption-text\">Website in German, with a large Herunterladen (Download) button<\/p><\/div>\n<p>If the visitor clicks the button, the site downloads an executable file that appears to be an installer to the computer. Opening it, the user sees a menu with some inactive buttons, creating the illusion that, once installed, the app can be used to run and configure the game.<\/p>\n<div id=\"attachment_37916\" style=\"width: 810px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/12\/07143539\/cyberpunk-2077-scam-screen-3.png\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-37916\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/12\/07143539\/cyberpunk-2077-scam-screen-3.png\" alt=\"Fake Cyberpunk 2077 installer\" width=\"800\" height=\"500\" class=\"size-full wp-image-17659\"><\/a><p id=\"caption-attachment-37916\" class=\"wp-caption-text\">Fake Cyberpunk 2077 installer<\/p><\/div>\n<p>Three options are active: Install, Support (this button does nothing) and Exit. Clicking Install opens a window that seems to show the game being downloaded and unpacked.<\/p>\n<div id=\"attachment_37917\" style=\"width: 810px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/12\/07143546\/cyberpunk-2077-scam-screen-4.png\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-37917\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/12\/07143546\/cyberpunk-2077-scam-screen-4.png\" alt=\"The fake installer pretends to download Cyberpunk 2077. Just don't read it too carefully\" width=\"800\" height=\"500\" class=\"size-full wp-image-17661\"><\/a><p id=\"caption-attachment-37917\" class=\"wp-caption-text\">The fake installer pretends to download Cyberpunk 2077. Just don\u2019t read it too carefully<\/p><\/div>\n<p>In fact, the program does nothing but sit for a while, emulating installation progress before asking the user for a license key. No key? No problem. They can get one by clicking the Get License Key button.<\/p>\n<div id=\"attachment_37918\" style=\"width: 810px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/12\/07143554\/cyberpunk-2077-scam-screen-5.png\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-37918\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/12\/07143554\/cyberpunk-2077-scam-screen-5.png\" alt=\"The installer requests a license key\" width=\"800\" height=\"500\" class=\"size-full wp-image-17663\"><\/a><p id=\"caption-attachment-37918\" class=\"wp-caption-text\">The installer requests a license key<\/p><\/div>\n<p>Clicking the button opens another website that offers the user a chance to take a survey or enter a giveaway to get the key.<\/p>\n<div id=\"attachment_37919\" style=\"width: 1310px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/12\/07143603\/cyberpunk-2077-scam-screen-6.png\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-37919\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/12\/07143603\/cyberpunk-2077-scam-screen-6.png\" alt=\"Getting a key means having to take a survey. Note the reviews on the right \u2014 also fake\" width=\"1300\" height=\"760\" class=\"size-full wp-image-17665\"><\/a><p id=\"caption-attachment-37919\" class=\"wp-caption-text\">Getting a key means having to take a survey. Note the reviews on the right \u2014 also fake<\/p><\/div>\n<p>The next prompt is a set of unrelated questions, as well as requests for a phone number and e-mail address. That contact information is the likely target of the attack; contact information is useful for spamming.<\/p>\n<div id=\"attachment_37920\" style=\"width: 1210px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/12\/07143612\/cyberpunk-2077-scam-screen-7.png\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-37920\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/12\/07143612\/cyberpunk-2077-scam-screen-7.png\" alt=\"Example of a survey used by scammers\" width=\"1200\" height=\"780\" class=\"size-full wp-image-17667\"><\/a><p id=\"caption-attachment-37920\" class=\"wp-caption-text\">Example of a survey used by scammers<\/p><\/div>\n<div id=\"attachment_37921\" style=\"width: 1210px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/12\/07143619\/cyberpunk-2077-scam-screen-8.png\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-37921\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/12\/07143619\/cyberpunk-2077-scam-screen-8.png\" alt=\"In any case, in the end, the user is asked for contact information\" width=\"1200\" height=\"780\" class=\"size-full wp-image-17669\"><\/a><p id=\"caption-attachment-37921\" class=\"wp-caption-text\">In any case, in the end, the user is asked for contact information<\/p><\/div>\n<p>After receiving all of the answers, the site does provide a key \u2014 and it appears to work because it was coded into the fake installer. The game loads, and it looks like fun time may have arrived at last. Well, not quite. The app displays a splash screen but then says it is missing a DLL required to run the game.<\/p>\n<div id=\"attachment_37922\" style=\"width: 740px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/12\/07143628\/cyberpunk-2077-scam-screen-9.png\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-37922\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/12\/07143628\/cyberpunk-2077-scam-screen-9.png\" alt=\"Fake Cyberpunk 2077 can't start because a DLL is missing\" width=\"730\" height=\"400\" class=\"size-full wp-image-17671\"><\/a><p id=\"caption-attachment-37922\" class=\"wp-caption-text\">Fake Cyberpunk 2077 can\u2019t start because a DLL is missing<\/p><\/div>\n<p>The frustrated user now has to click on another Download button and again is redirected to a Web page with yet another survey (which is a dead end).<\/p>\n<div id=\"attachment_37923\" style=\"width: 1470px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/12\/07143643\/cyberpunk-2077-scam-screen-10.png\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-37923\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/37\/2020\/12\/07143643\/cyberpunk-2077-scam-screen-10.png\" alt=\"History repeats itself: Loading the DLL means taking another survey\" width=\"1460\" height=\"660\" class=\"size-full wp-image-17673\"><\/a><p id=\"caption-attachment-37923\" class=\"wp-caption-text\">History repeats itself: Loading the DLL means taking another survey<\/p><\/div>\n<p>Once again, alas, no pot of gold waits at the end of the rainbow. Patient users will find only a fake installer and a \u201cgame\u201d that never gets past the splash screen.<\/p>\n<h2>Just wait for the real Cyberpunk 2077<\/h2>\n<p>Downloading a nongame, wasting time on pointless surveys, and landing in yet another spam database is bad, although not fatal. But similar schemes can be more dangerous. For example, instead of a survey, the cybercriminals might ask for money in exchange for the key. Or instead of a dummy installer, they might provide malware. This year, we already registered several thousand infection attempts through fake <em>Cyberpunk 2077<\/em> downloads.<\/p>\n<p>Ultimately, no matter how much you\u2019re itching to plunge into the long-awaited game with a digitized Keanu Reeves, you\u2019ll have to wait for the official release. For now, to avoid the clutches of scammers:<\/p>\n<ul>\n<li>Remember that if something looks too good to be true, it probably is. A website offering a free version of one of the most anticipated games of the year before the release date is bound to be fake.<\/li>\n<li>Think twice before giving any website personal information or payment details. In cases of sites promising access to a coveted file or key, you\u2019ll be wasting your time \u2014 or worse.<\/li>\n<li>Use a <a href=\"https:\/\/me-en.kaspersky.com\/plus?icid=me-en_bb2022-kdplacehd_acq_ona_smm__onl_b2c_kdaily_lnk_sm-team___kplus___\" target=\"_blank\" rel=\"noopener\">reliable security solution<\/a> with a database of fraudulent resources that is updated in real time. It will tell you which sites to steer clear of, and it will protect you from malware. Our products detect the sites mentioned in this post with the verdict HEUR:Hoax.Script.FakeGame.gen, and files downloaded from them as HEUR:Hoax.MSIL.FakeGame.gen.<\/li>\n<\/ul>\n<input type=\"hidden\" class=\"category_for_banner\" value=\"kis-gaming\">\n","protected":false},"excerpt":{"rendered":"<p>Ahead of its release, scammers are offering free Cyberpunk 2077 downloads, but they\u2019re really after your data.<\/p>\n","protected":false},"author":2628,"featured_media":17675,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1486],"tags":[2387,80,617,367,695],"class_list":{"0":"post-17654","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-threats","8":"tag-cyberpunk-2077","9":"tag-fraud","10":"tag-gamers","11":"tag-hoax","12":"tag-scam"},"hreflang":[{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/cyberpunk-2077-scam\/17654\/"},{"hreflang":"en-in","url":"https:\/\/www.kaspersky.co.in\/blog\/cyberpunk-2077-scam\/22176\/"},{"hreflang":"ar","url":"https:\/\/me.kaspersky.com\/blog\/cyberpunk-2077-scam\/8806\/"},{"hreflang":"en-us","url":"https:\/\/usa.kaspersky.com\/blog\/cyberpunk-2077-scam\/23814\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/cyberpunk-2077-scam\/21898\/"},{"hreflang":"es-mx","url":"https:\/\/latam.kaspersky.com\/blog\/cyberpunk-2077-scam\/20688\/"},{"hreflang":"es","url":"https:\/\/www.kaspersky.es\/blog\/cyberpunk-2077-scam\/24375\/"},{"hreflang":"it","url":"https:\/\/www.kaspersky.it\/blog\/cyberpunk-2077-scam\/23532\/"},{"hreflang":"ru","url":"https:\/\/www.kaspersky.ru\/blog\/cyberpunk-2077-scam\/29601\/"},{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/cyberpunk-2077-scam\/9091\/"},{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/cyberpunk-2077-scam\/37907\/"},{"hreflang":"fr","url":"https:\/\/www.kaspersky.fr\/blog\/cyberpunk-2077-scam\/16099\/"},{"hreflang":"pt-br","url":"https:\/\/www.kaspersky.com.br\/blog\/cyberpunk-2077-scam\/16717\/"},{"hreflang":"pl","url":"https:\/\/plblog.kaspersky.com\/cyberpunk-2077-scam\/14262\/"},{"hreflang":"de","url":"https:\/\/www.kaspersky.de\/blog\/cyberpunk-2077-scam\/25865\/"},{"hreflang":"zh","url":"https:\/\/www.kaspersky.com.cn\/blog\/cyberpunk-2077-scam\/12370\/"},{"hreflang":"ja","url":"https:\/\/blog.kaspersky.co.jp\/cyberpunk-2077-scam\/29702\/"},{"hreflang":"nl","url":"https:\/\/www.kaspersky.nl\/blog\/cyberpunk-2077-scam\/26476\/"},{"hreflang":"ru-kz","url":"https:\/\/blog.kaspersky.kz\/cyberpunk-2077-scam\/23142\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/cyberpunk-2077-scam\/28473\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/cyberpunk-2077-scam\/28289\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/me-en.kaspersky.com\/blog\/tag\/gamers\/","name":"gamers"},"_links":{"self":[{"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/17654","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/users\/2628"}],"replies":[{"embeddable":true,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/comments?post=17654"}],"version-history":[{"count":10,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/17654\/revisions"}],"predecessor-version":[{"id":17674,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/17654\/revisions\/17674"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/media\/17675"}],"wp:attachment":[{"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/media?parent=17654"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/categories?post=17654"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/me-en.kaspersky.com\/blog\/wp-json\/wp\/v2\/tags?post=17654"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}