FIFA-themed phishing-as-a-service market selling scam kits and ticket-buying bots
Threat Actor Meta
Summary
Hide ▲
Show ▼
A FIFA-themed phishing-as-a-service market is selling ready-made scam kits and ticket-buying bots, lowering the barrier for fraud operators and making takedowns less effective during the World Cup 2026 scam window. The ecosystem lets multiple buyers reuse the same fraud infrastructure across cloned sites and account-takeover flows. That service model turns one operator’s tooling into a repeatable criminal supply chain. The result is broader ticket theft, credential abuse, and fraud resilience across the event period.
Related Happenings
FIFA World Cup 2026 pre-positioned fraud campaign
Campaign
H score30
First: 30.06.2026 14:30
Last: 30.06.2026 14:30
Sources 1
About this happening:
A pre-positioned FIFA World Cup 2026 fraud campaign was already staged before kickoff, widening the risk of email impersonation, fake apps, and travel-site spoofing*...
FIFA World Cup 2026 pre-positioned fraud campaign
CampaignAbout this happening: A pre-positioned FIFA World Cup 2026 fraud campaign was already staged before kickoff, widening the risk of email impersonation, fake apps, and travel-site spoofing*...
Pre-World Cup 2026 fraud surge across partner spoofing, fake sportsbook apps, and travel domains
Trend
H score31
First: 30.06.2026 14:30
Last: 30.06.2026 14:30
Sources 1
About this happening:
Pre-tournament fraud around FIFA World Cup 2026 intensified across partners, sportsbook users, and travel buyers, raising the risk of impersonation, payment diversion,...
Pre-World Cup 2026 fraud surge across partner spoofing, fake sportsbook apps, and travel domains
TrendAbout this happening: Pre-tournament fraud around FIFA World Cup 2026 intensified across partners, sportsbook users, and travel buyers, raising the risk of impersonation, payment diversion,...
U.S. Justice Department seizes World Cup piracy domains
Law Enforcement
H score67
First: 29.06.2026 14:21
Last: 29.06.2026 14:21
Sources 1
About this happening:
The U.S. Justice Department's Criminal Division seized nearly 400 web domains tied to illegal FIFA World Cup streaming, disrupting a piracy operation built on domain i...
U.S. Justice Department seizes World Cup piracy domains
Law EnforcementAbout this happening: The U.S. Justice Department's Criminal Division seized nearly 400 web domains tied to illegal FIFA World Cup streaming, disrupting a piracy operation built on domain i...
FBI public service announcement on fake FIFA websites
Public Sector Action
H score21
First: 28.05.2026 22:08
Last: 28.05.2026 22:08
Sources 1
How related:
The FBI advisory lists dozens of fake FIFA domains, from misspelled lookalikes to phony FIFA jobs pages, and warns more are coming.
About this happening:
The FBI and security researchers warn that FIFA-themed fraud is already targeting World Cup 2026 fans ahead of the June 11 kickoff. Reported activity includes mo...
FBI public service announcement on fake FIFA websites
Public Sector ActionHow related: The FBI advisory lists dozens of fake FIFA domains, from misspelled lookalikes to phony FIFA jobs pages, and warns more are coming.
About this happening: The FBI and security researchers warn that FIFA-themed fraud is already targeting World Cup 2026 fans ahead of the June 11 kickoff. Reported activity includes mo...
Ghost Stadium FIFA World Cup fraud campaign
Campaign
H score41
First: 27.05.2026 14:28
Last: 27.05.2026 14:28
Sources 1
How related:
At the center is a group it calls GHOST STADIUM, a Chinese-speaking, money-driven operation running one phishing kit across more than 300 of those sites.
About this happening:
A Ghost Stadium-linked FIFA impersonation fraud campaign is targeting 2026 FIFA World Cup fans with cloned fifa.com pages, fake ticket and hospitality offers, and...
Ghost Stadium FIFA World Cup fraud campaign
CampaignHow related: At the center is a group it calls GHOST STADIUM, a Chinese-speaking, money-driven operation running one phishing kit across more than 300 of those sites.
About this happening: A Ghost Stadium-linked FIFA impersonation fraud campaign is targeting 2026 FIFA World Cup fans with cloned fifa.com pages, fake ticket and hospitality offers, and...
Timeline
-
05.06.2026 10:01 2 articles · 1mo ago
FIFA-themed phishing-as-a-service market sells scam kits and ticket-buying bots
Campaign Scope UpdateA FIFA-themed phishing-as-a-service market is selling ready-made scam kits and ticket-buying bots during the World Cup 2026 scam window, letting multiple operators reuse the same fraud tooling across cloned ticket and login sites. The service model lowers the barrier to entry for ticket theft and makes takedowns of individual operators less effective.
Show sources
- FIFA World Cup 2026 Scams Are Already Live: Fake Sites, Banking Malware, and Stolen Logins — thehackernews.com — 05.06.2026 10:01
- FIFA World Cup 2026 Scams Are Already Live: Fake Sites, Banking Malware, and Stolen Logins — thehackernews.com — 05.06.2026 10:01