New analysis reveals a massive network of fraudulent domains capitalizing on the 2026 FIFA World...
1,000+ fraudulent domains targeting 2026 FIFA World Cup users with gambling redirects and data harvesting.
Summary
Security researchers discovered a large network of over 1,000 malicious domains registered in the past six months exploiting interest in the 2026 FIFA World Cup. These domains employ multiple tactics including redirects to fraudulent gambling applications, data harvesting schemes, malvertising campaigns, and potentially unwanted program (PUP) distribution. The campaign represents a coordinated effort to monetize event-related traffic through credential theft, financial fraud, and malware delivery.
The lesson from this incident
Full lessonCybercriminals registered over 1,000 malicious domains exploiting public interest in the 2026 FIFA World Cup to conduct credential theft, financial fraud, and malware distribution. The coordinated campaign demonstrates how attackers leverage major sporting events and popular topics to create convincing social engineering lures. Users visiting these domains face multiple threats including redirects to fraudulent gambling sites, data harvesting operations, and potentially unwanted program installations. This highlights the critical importance of user education and protective measures when browsing event-related content online.
What helps against this
How we list vendors- DNS filtering and secure web gateway
Users cannot reach known-malicious sites, and malware cannot phone home.