FIFA logins traded on dark-web markets
Data Leak
Summary
Hide ▲
Show ▼
Around 2,500 FIFA logins have surfaced on dark-web markets, turning stolen credentials into an active exposure that can fuel account abuse and downstream fraud. The leak is tied to Vidar and Lumma infostealer infections, which gathered the credentials from a broader fraud ecosystem aimed at 2026 FIFA World Cup fans.
Related Happenings
FIFA-themed phishing-as-a-service market selling scam kits and ticket-buying bots
Threat Actor Meta
H score42
First: 05.06.2026 10:01
Last: 05.06.2026 10:01
Sources 1
About this happening:
A **FIFA-themed phishing-as-a-service market** is selling **ready-made scam kits** and **ticket-buying bots**, lowering the barrier for fraud operators and making takedowns less e...
FIFA-themed phishing-as-a-service market selling scam kits and ticket-buying bots
Threat Actor MetaAbout this happening: A **FIFA-themed phishing-as-a-service market** is selling **ready-made scam kits** and **ticket-buying bots**, lowering the barrier for fraud operators and making takedowns less e...
FBI public service announcement on fake FIFA websites
Public Sector Action
H score21
First: 28.05.2026 22:08
Last: 28.05.2026 22:08
Sources 1
About this happening:
The **FBI** and security researchers warn that **FIFA-themed fraud** is already targeting **World Cup 2026** fans ahead of the **June 11 kickoff**. Reported activity includes **mo...
FBI public service announcement on fake FIFA websites
Public Sector ActionAbout this happening: The **FBI** and security researchers warn that **FIFA-themed fraud** is already targeting **World Cup 2026** fans ahead of the **June 11 kickoff**. Reported activity includes **mo...
Ghost Stadium FIFA World Cup fraud campaign
Campaign
H score41
First: 27.05.2026 14:28
Last: 27.05.2026 14:28
Sources 1
How related:
More than 4300 fraudulent domains impersonating FIFA's official web presence have been registered since last August, building a fraud operation aimed squarely at fans of the 2026 FIFA World Cup.
About this happening:
A **Ghost Stadium**-linked **FIFA impersonation fraud campaign** is targeting **2026 FIFA World Cup** fans with cloned **fifa.com** pages, fake ticket and hospitality offers, and...
Ghost Stadium FIFA World Cup fraud campaign
CampaignHow related: More than 4300 fraudulent domains impersonating FIFA's official web presence have been registered since last August, building a fraud operation aimed squarely at fans of the 2026 FIFA World Cup.
About this happening: A **Ghost Stadium**-linked **FIFA impersonation fraud campaign** is targeting **2026 FIFA World Cup** fans with cloned **fifa.com** pages, fake ticket and hospitality offers, and...
Meta rolls out anti-scam protections and AI scam detection across WhatsApp, Facebook, and Messenger
Security Tool/Service
H score43
First: 11.03.2026 15:29
Last: 11.03.2026 15:29
Sources 1
About this happening:
Meta is rolling out **anti-scam protections** across **WhatsApp, Facebook, and Messenger**, using warnings and AI detection to block scams before users engage. The updates target...
Meta rolls out anti-scam protections and AI scam detection across WhatsApp, Facebook, and Messenger
Security Tool/ServiceAbout this happening: Meta is rolling out **anti-scam protections** across **WhatsApp, Facebook, and Messenger**, using warnings and AI detection to block scams before users engage. The updates target...
Punishing Owl leak of Russian state and scientific organizations
Data Leak
H score31
First: 09.02.2026 12:58
Last: 09.02.2026 12:58
Sources 1
About this happening:
A **Punishing Owl** leak operation is exposing sensitive information from **Russian state institutions, scientific enterprises, and IT organizations**, increasing the risk of publ...
Punishing Owl leak of Russian state and scientific organizations
Data LeakAbout this happening: A **Punishing Owl** leak operation is exposing sensitive information from **Russian state institutions, scientific enterprises, and IT organizations**, increasing the risk of publ...
Timeline
-
27.05.2026 14:28 2 articles · 1mo ago
Around 2,500 FIFA logins surface on dark-web markets
Initial DisclosureAround 2,500 FIFA logins are being traded on dark-web markets after Vidar and Lumma infostealer infections collected credentials from a fraud ecosystem aimed at fans of the 2026 FIFA World Cup.
Show sources
- Thousands of Fake FIFA Domains Target World Cup Fans — www.infosecurity-magazine.com — 27.05.2026 14:28
- Thousands of Fake FIFA Domains Target World Cup Fans — www.infosecurity-magazine.com — 27.05.2026 14:28