{
  "reviewed": "2026-11-02",
  "entries": [
    {
      "alias": "PCSX4",
      "domains": [
        "pcsx4.com"
      ],
      "threat_classification": "Survey Scam",
      "technical_red_flags": [
        "Closed-source binary; no public Git repository with buildable code",
        "Name imitates the unrelated, legitimate PCSX and PCSX2 projects",
        "Download gated behind survey and offer completion",
        "A GitHub account once linked from the site hosted no emulator source and was later removed",
        "Has been marketed under both PS4 and PS5 emulator search terms"
      ],
      "date_flagged": "2026-10-24"
    },
    {
      "alias": "PCSX5",
      "domains": [],
      "threat_classification": "Fake Installer",
      "technical_red_flags": [
        "Closed-source Windows and macOS installers; no public Git repository",
        "Reuses PCSX4 naming and marketing copy",
        "Claims native play of PS5 titles that no public emulator can run start to finish",
        "Download page tells visitors to avoid other download sources, keeping them on the scam domain"
      ],
      "date_flagged": "2026-10-24"
    },
    {
      "alias": "PS5Emux",
      "domains": [
        "ps5emux.com"
      ],
      "threat_classification": "Fake Installer",
      "technical_red_flags": [
        "Closed-source binary; no public Git repository",
        "Advertises Windows, macOS, Android and iOS builds; no working PS5 emulator exists for Android or iOS",
        "Domain registration owner hidden behind WHOIS privacy"
      ],
      "date_flagged": "2026-10-24"
    },
    {
      "alias": "\"Fully playable GTA VI\" PS5 emulator repositories",
      "domains": [],
      "threat_classification": "Fake GitHub Repo",
      "technical_red_flags": [
        "Advertises a playable PC build of a game that had not been released on PS5",
        "Ships prebuilt binaries or archives instead of buildable source code",
        "Repository stars can be inflated by networks of fake GitHub accounts",
        "Same delivery pattern as fake emulator repositories that security researchers have documented loading info-stealers"
      ],
      "date_flagged": "2026-10-24"
    },
    {
      "alias": "\"PS5 Emulator for Windows\" (emulators-for-pc on GitHub)",
      "domains": [],
      "github_repository": "emulators-for-pc/ps5-emulator-for-windows",
      "threat_classification": "Fake GitHub Repo",
      "technical_red_flags": [
        "Hosted on github.com, so it passes the common advice to \"only download from GitHub\"",
        "Whole history is 3 commits in 7 minutes on 2026-05-27, ending in a bulk \"Add files via upload\"",
        "Filler files pad the language stats: .go and .dll files contain C, a .js file contains Go, plus a fake \"encrypted payload\"",
        "No license and no build system; nothing in the repository builds an emulator",
        "The release has no files on GitHub; its Download button leads off-site through a URL shortener",
        "Tells users to run PS5_Emulator.exe as administrator; README shows unverifiable download and rating badges"
      ],
      "date_flagged": "2026-10-24"
    },
    {
      "alias": "\"PS5 jailbreak\" download sites and PC unlock tools",
      "domains": [],
      "threat_classification": "Fake Jailbreak",
      "technical_red_flags": [
        "Claims a ready-made jailbreak for the newest PS5 system software, which homebrew news outlets report has not been publicly released",
        "Download or \"activation\" locked behind a survey, an offer or a \"human verification\" step",
        "Asks for payment for a \"jailbreak\", an unlock tool or an activation key",
        "Offers a Windows program or \"PS5 unlock tool\" to download and run instead of public source code",
        "Homebrew news coverage reports that some of these sites push malicious software"
      ],
      "date_flagged": "2026-10-26"
    },
    {
      "alias": "Fake AnyPS5 and KytyPS5 repositories on GitHub",
      "domains": [],
      "threat_classification": "Info-Stealer",
      "technical_red_flags": [
        "Copies of the AnyPS5 and KytyPS5 projects on new GitHub accounts, with a few dozen stars, far fewer than the real projects",
        "Hand out a Windows program to run instead of buildable source code",
        "The program asks for administrator rights and adds Microsoft Defender exclusions; no real emulator needs this",
        "NordVPN's threat researchers analysed the program and identified it as a password stealer that also takes other personal data, then deletes its own files"
      ],
      "date_flagged": "2026-11-02"
    }
  ]
}