Forest Global Training Partners

Cyber Risks · Unit 42 Palo Alto Networks

2026 World Cup: Discussing The World’s Biggest Game’s Attack Surface

Summary: Unit 42 assesses that the 2026 FIFA World Cup, running June 11 to July 19 across 16 host cities in three nations and 104 matches, faces highly likely disruptive intrusions, criminal fraud at scale and politically motivated DDoS and hack-and-leak operations. The assessment cites at least 140 cyber events during the Paris 2024 Olympics, including 22 confirmed unauthorized intrusions and a ransomware attack on the Grand Palais venue, and names Iran-nexus groups including Handala Hack Team and CyberAv3ngers alongside pro-Russian NoName057(16) as actors of concern.

Bottom line: Every U.S. host city operates municipal water, wastewater and energy infrastructure inside the threat envelope, and a 2024 CISA assessment found over 70% non-compliance with existing safety requirements at U.S. water utilities. CyberAv3ngers is documented to select small municipal authorities precisely because they run OT through consumer remote-access tools or expose PLC interfaces directly to the internet.

Read the original at Unit 42 Palo Alto Networks ↗

Topics
Malware
Related