AI-decoded clones of GTA Vice City and Halo now run in web browsers

Hundreds of popular video games have been decompiled and ported to run directly in web browsers in recent weeks, according to a report by Kotaku. These unauthorized clones were created using artificial intelligence tools and techniques described as vibe-coding, allowing legacy software to execute within modern web environments without requiring traditional installation procedures on user devices.

The surge in these browser-based ports includes several high-profile titles that were previously restricted to specific consoles or operating systems. According to Kotaku, the affected games include Grand Theft Auto: Vice City, Halo: Combat Evolved, Call of Duty: Black Ops, and Skate 3. The report notes that these specific titles appear to function well within the browser interface, suggesting a high degree of technical fidelity in the decompilation and translation process performed by the AI systems.

Technical Context and Origins

The emergence of these browser-based games represents a significant shift in how legacy software can be accessed and distributed online. The process involves decompiling original game code or recreating it through AI-driven methods, often referred to in the report as vibe-coding. This technique allows developers or hobbyists to translate complex, closed-source applications into web-compatible formats, bypassing the need for original hardware or licensed software environments.

According to the Kotaku report, the volume of these ports has increased rapidly, with hundreds of titles appearing in recent weeks. The speed and scale of this activity suggest that AI tools have lowered the barrier to entry for creating functional game emulators or clones. This development raises questions about copyright enforcement and the technical capabilities of current generative AI models when applied to software engineering and reverse engineering tasks.

Impact on Gaming and Security

The ability to run major titles like Halo and Grand Theft Auto in a browser affects both consumers and rights holders. For users, this provides easy access to older games without the friction of finding physical media or compatible hardware. However, for copyright owners, it represents a new vector for unauthorized distribution and potential infringement. The fact that these games "play well," as noted by Kotaku, indicates that the technical quality of these AI-generated ports is sufficient to attract a broad audience.

Security professionals should also consider the implications of running decompiled code in web browsers. Browsers are typically sandboxed environments, but executing complex, reverse-engineered applications could introduce new vulnerabilities or exploit vectors. The lack of official oversight or security auditing for these AI-generated clones means that users may be exposing their systems to unknown risks, even if the primary intent is entertainment rather than malicious activity.

What should you do?

Organizations and individuals should monitor their web traffic for unauthorized execution of complex applications that may not align with standard usage patterns. Security teams should evaluate browser security policies to ensure that sandboxing mechanisms remain robust against potentially malicious or unstable code injected via these unofficial ports. Users should be aware that downloading or accessing such content may violate terms of service or copyright laws, and the source of the code is unverified.

Background: Generative AI

Generative AI creates content from prompts. Agentic AI performs actions using tools. The former outputs text or code; the latter changes system states. Understanding this distinction is critical for security architecture, as agentic systems introduce execution risks that pure generation models do not possess.

Read the full guide: Generative AI vs Agentic AI: Architectural Differences and Security Risks

What to do and how to stay safe: Grand Theft Auto

• Review browser extension permissions and remove any tools that claim to enable unauthorized game emulation or decompilation.
• Monitor network logs for unusual outbound traffic that may indicate data exfiltration or communication with unverified hosting servers.
• Educate users on the risks of running unverified, AI-generated software in web browsers, including potential malware or privacy breaches.
• Ensure that endpoint detection and response tools are configured to flag suspicious script execution within web environments.

Step-by-step guide: Prompt Injection Warning Signs: How to Spot AI Manipulation

General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

Which games have been ported to browsers using AI?

According to Kotaku, titles include Grand Theft Auto: Vice City, Halo: Combat Evolved, Call of Duty: Black Ops, and Skate 3.

How were these games ported to web browsers?

The games were decompiled or recreated using AI tools and a method described as vibe-coding, allowing them to run in browsers.

Do these browser-based games work well?

Yes, the report states that some big titles like GTA: Vice City and Halo play well within the browser environment.