The FBI is warning that criminals are setting up fake FIFA websites ahead of the 2026 World Cup to steal personal and financial information, sell bogus tickets, and spread event-related fraud. Researchers also found large-scale phishing and malvertising campaigns tied to the World Cup, including a Chinese threat actor tracked as Ghost Stadium using hundreds of cloned FIFA sites. #FIFA #GhostStadium #2026WorldCup
Keypoints
- The FBI warned about fake FIFA websites targeting fans before the 2026 World Cup.
- Fraud sites use lookalike domains such as fiffa[.]com and fake job portals to deceive users.
- These sites steal names, addresses, phone numbers, and payment details for scams and identity theft.
- Group-IB and Bitdefender reported World Cup-themed malvertising across Google Search, Facebook, Telegram, and WhatsApp.
- Ghost Stadium used more than 300 phishing sites to run premium ticket fraud.