Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

FBI public service announcement on fake FIFA websites

Public Sector Action
First reported
Last updated
Happening score
H score 21
2 unique sources, 2 articles

Summary

Hide ▲

The FBI and security researchers warn that FIFA-themed fraud is already targeting World Cup 2026 fans ahead of the June 11 kickoff. Reported activity includes more than 4,300 fraudulent FIFA domains, cloned login pages tied to GHOST STADIUM, and banking malware hidden in pirate streaming apps. The campaign is being pushed through Facebook ads, Telegram, WhatsApp, and search results to steal logins, take over accounts, and resell tickets.

Related Happenings

FIFA World Cup 2026 pre-positioned fraud campaign

Campaign
H score30 First: 30.06.2026 14:30 Last: 30.06.2026 14:30 Sources 1

About this happening: A **pre-positioned FIFA World Cup 2026 fraud campaign** was already staged before kickoff, widening the risk of **email impersonation**, **fake apps**, and **travel-site spoofing*...

Open Happening

Pre-World Cup 2026 fraud surge across partner spoofing, fake sportsbook apps, and travel domains

Trend
H score31 First: 30.06.2026 14:30 Last: 30.06.2026 14:30 Sources 1

About this happening: **Pre-tournament fraud** around **FIFA World Cup 2026** intensified across **partners, sportsbook users, and travel buyers**, raising the risk of impersonation, payment diversion,...

Open Happening

U.S. Justice Department seizes World Cup piracy domains

Law Enforcement
H score67 First: 29.06.2026 14:21 Last: 29.06.2026 14:21 Sources 1

About this happening: The **U.S. Justice Department's Criminal Division** seized **nearly 400 web domains** tied to **illegal FIFA World Cup streaming**, disrupting a piracy operation built on domain i...

Open Happening

FIFA-themed phishing-as-a-service market selling scam kits and ticket-buying bots

Threat Actor Meta
H score42 First: 05.06.2026 10:01 Last: 05.06.2026 10:01 Sources 1

How related: Group-IB also flagged a "phishing-as-a-service" market that sells ready-made scam kits and ticket-buying bots, so taking down one operator barely helps.

About this happening: A **FIFA-themed phishing-as-a-service market** is selling **ready-made scam kits** and **ticket-buying bots**, lowering the barrier for fraud operators and making takedowns less e...

Open Happening

Ghost Stadium FIFA World Cup fraud campaign

Campaign
H score41 First: 27.05.2026 14:28 Last: 27.05.2026 14:28 Sources 1

How related: A major operation that Group-IB researchers attributed to a Chinese threat actor tracked as Ghost Stadium, uses more than 300 phishing sites, clones of the real FIFA portal, for premium ticket fraud.

About this happening: A **Ghost Stadium**-linked **FIFA impersonation fraud campaign** is targeting **2026 FIFA World Cup** fans with cloned **fifa.com** pages, fake ticket and hospitality offers, and...

Open Happening

Timeline

  1. 28.05.2026 22:08 3 articles · 1mo ago

    FBI warns of fake FIFA websites ahead of the 2026 World Cup

    Initial Disclosure

    The FBI warned that fake websites impersonating FIFA are targeting World Cup fans and online users in the United States, Canada, and Mexico to steal personal and financial information, sell fake tickets and hospitality packages, and push other fraud tied to the event. The warning cited typosquatted domains such as fiffa[.]com, fake employment portals like jobs-fifa[.]com and fifa-hiring[.]com, and alternative top-level domains including .org, .xyz, .live, and .sale; the same campaign picture also included malvertising and hundreds of phishing sites, with more than 300 phishing sites attributed by Group-IB to Ghost Stadium for premium ticket fraud.

    Show sources
    Open in new tab