This is according to the threat research arm of NordVPN.

Fake PS5 emulators infected with malware have been floating around GitHub, according to an investigation by NordVPN. The company's Threat Intelligence research team found that the malware is disguised as legitimate emulation software and works to steal passwords and other personal data.

The listing pages mimic existing emulation software, which is likely to trick people into thinking they're downloading the real thing. As of this writing, malicious GitHub repositories have been disguised as the popular Kyttyps5 and AnyPS5 emulators.

"Emulation fans are a perfect target. They are used to downloading experimental software from GitHub and running unsigned files, so nothing about this feels suspicious," says company CTO Marijus Briedis. "But this is not an emulator. It steals your data, hides from your antivirus and erases its own tracks before you notice anything is wrong."

Here's how it works.…