FIFA logins traded on dark-web markets
Data Leak
Summary
Hide ▲
Show ▼
Around 2,500 FIFA logins have surfaced on dark-web markets, turning stolen credentials into an active exposure that can fuel account abuse and downstream fraud. The leak is tied to Vidar and Lumma infostealer infections, which gathered the credentials from a broader fraud ecosystem aimed at 2026 FIFA World Cup fans.
Related Happenings
Ghost Stadium FIFA World Cup fraud campaign
Campaign
First: 27.05.2026 14:28
Last: 27.05.2026 14:28
Sources 1
How related:
More than 4300 fraudulent domains impersonating FIFA's official web presence have been registered since last August, building a fraud operation aimed squarely at fans of the 2026 FIFA World Cup.
About this happening:
A **Ghost Stadium** fraud campaign has registered **4,300+ FIFA lookalike domains** and is using **paid Facebook ads** to funnel **2026 FIFA World Cup** fans into phishing and tic...
Ghost Stadium FIFA World Cup fraud campaign
CampaignHow related: More than 4300 fraudulent domains impersonating FIFA's official web presence have been registered since last August, building a fraud operation aimed squarely at fans of the 2026 FIFA World Cup.
About this happening: A **Ghost Stadium** fraud campaign has registered **4,300+ FIFA lookalike domains** and is using **paid Facebook ads** to funnel **2026 FIFA World Cup** fans into phishing and tic...
Meta rolls out anti-scam protections and AI scam detection across WhatsApp, Facebook, and Messenger
Security Tool/Service
First: 11.03.2026 15:29
Last: 11.03.2026 15:29
Sources 1
About this happening:
Meta is rolling out **anti-scam protections** across **WhatsApp, Facebook, and Messenger**, using warnings and AI detection to block scams before users engage. The updates target...
Meta rolls out anti-scam protections and AI scam detection across WhatsApp, Facebook, and Messenger
Security Tool/ServiceAbout this happening: Meta is rolling out **anti-scam protections** across **WhatsApp, Facebook, and Messenger**, using warnings and AI detection to block scams before users engage. The updates target...
Punishing Owl leak of Russian state and scientific organizations
Data Leak
First: 09.02.2026 12:58
Last: 09.02.2026 12:58
Sources 1
About this happening:
A **Punishing Owl** leak operation is exposing sensitive information from **Russian state institutions, scientific enterprises, and IT organizations**, increasing the risk of publ...
Punishing Owl leak of Russian state and scientific organizations
Data LeakAbout this happening: A **Punishing Owl** leak operation is exposing sensitive information from **Russian state institutions, scientific enterprises, and IT organizations**, increasing the risk of publ...
Peru loan phishing campaign impersonating financial institutions across Latin America
Campaign
First: 21.01.2026 17:00
Last: 21.01.2026 17:00
Sources 1
About this happening:
A **Peru-focused loan phishing campaign** has expanded across **Latin America**, putting users' **card numbers**, **PIN codes**, and **banking credentials** at risk. The operation...
Peru loan phishing campaign impersonating financial institutions across Latin America
CampaignAbout this happening: A **Peru-focused loan phishing campaign** has expanded across **Latin America**, putting users' **card numbers**, **PIN codes**, and **banking credentials** at risk. The operation...
Instagram account profiles leaked online
Data Leak
First: 11.01.2026 21:13
Last: 11.01.2026 21:13
Sources 1
About this happening:
**Instagram account profiles** were **scraped and leaked online**, exposing data from **17,017,213 records** and creating fresh risk of **phishing** and **social engineering**. Th...
Instagram account profiles leaked online
Data LeakAbout this happening: **Instagram account profiles** were **scraped and leaked online**, exposing data from **17,017,213 records** and creating fresh risk of **phishing** and **social engineering**. Th...
Timeline
-
27.05.2026 14:28 2 articles · 11h ago
Around 2,500 FIFA logins surface on dark-web markets
Initial DisclosureAround 2,500 FIFA logins are being traded on dark-web markets after Vidar and Lumma infostealer infections collected credentials from a fraud ecosystem aimed at fans of the 2026 FIFA World Cup.
Show sources
- Thousands of Fake FIFA Domains Target World Cup Fans — www.infosecurity-magazine.com — 27.05.2026 14:28
- Thousands of Fake FIFA Domains Target World Cup Fans — www.infosecurity-magazine.com — 27.05.2026 14:28