The Scam Before the Game: CTM360 Reveals Threats Targeting FIFA World Cup 2026 Fans
Summary: CTM360 researchers identified more than 7,000 FIFA World Cup 2026-themed domains, including over 4,500 registered in the last five months, with more than 1,000 malicious or fraudulent sites and over 1,000 social media impersonation accounts active across platforms including TikTok, Facebook, Instagram, X, YouTube, Telegram, and Pinterest. The campaigns combine fake ticket and streaming offers, betting scams, and malicious Android APKs tied to BTMob malware that can intercept OTPs and harvest SMS, with April 2026 alone accounting for more than 2,700 new themed domain registrations ahead of the June 2026 kickoff.
Key Takeaway: Attackers are building this infrastructure months before the tournament, and CTM360 observed many operating across hundreds of domains at once and relaunching after takedowns - so a single blocklist entry will not hold against a campaign designed to be rebuilt.
Read the original at The Hacker News ↗
- Topics
- Phishing & Social Engineering
- Related
- US disrupts North Korean campaign behind $400 million crypto theft Cyber Risks · Nov 14, 2026North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure Cyber Risks · Nov 13, 2026FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls Cyber Risks · Nov 13, 2026