[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fp5FV4sUdYo1uRzY9-hzZQ0k0aJAg1WDW9SMWoya-KHE":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"status":16,"created_at":17,"published_at":18,"article":19,"tags":23,"podcasts":36},"2471e98a-f88e-474c-98c6-87362b6a1ad4","fifa-world-cup-phishing-campaign-targets-sports-fans","5a2c8047-0741-4421-9c3f-5daed512f1aa","FIFA World Cup Phishing Campaign Targets Sports Fans","Cybercriminals have preemptively registered over 1,000 suspicious FIFA World Cup domains, with 33 already operating as fraudulent stores before the tournament begins. This demonstrates how attackers exploit major events to create convincing phishing sites that trick users into revealing personal information or payment details. The large scale and early timing of this campaign shows sophisticated planning by threat actors. Organizations and individuals must be particularly vigilant during high-profile events when emotional excitement can override security caution.","**Immediate actions:**\n- Issue security alerts to employees and customers about FIFA-themed phishing campaigns\n- Block access to known malicious domains through DNS filtering and web security gateways\n- Enable enhanced email security scanning for FIFA-related keywords and attachments\n\n**Long-term improvements:**\n- Develop event-based security awareness campaigns for major sporting events and holidays\n- Implement threat intelligence feeds to automatically detect brand impersonation domains\n- Establish partnerships with domain registrars for rapid takedown of fraudulent sites\n\n**Detection measures:**\n- Monitor for typosquatting domains that mimic your organization's branding during events\n- Set up automated alerts for suspicious domain registrations containing event-related keywords\n- Review web traffic logs for redirects to newly registered suspicious domains",[12,13,14,15],"CIS Control 14","NIST SP 800-61","NIST Cybersecurity Framework PR.AT","ISO 27001 A.7.2.2","published","2026-06-10T15:20:31.36966+00:00","2026-06-10T15:20:31.046+00:00",{"id":7,"url":20,"slug":21,"title":22},"https:\u002F\u002Fx.com\u002FRecordedFuture\u002Fstatus\u002F2064721787342987511","more-than-1-000-suspicious-fifaworldcup-domains-already-registered-33-fraudulent-b5ffa3","More than 1,000 suspicious @FIFAWorldCup domains already registered. 33 fraudulent FIFA-themed st...",[24,30],{"id":25,"name":26,"slug":27,"description":28,"color":29},"182e11d5-57c4-444e-8ec8-4682ad60261b","Incident Response","incident-response","Slow detection, poor containment, missing playbooks","#14b8a6",{"id":31,"name":32,"slug":33,"description":34,"color":35},"7261eb8f-acd4-4d93-a489-7fdd652ec0ea","Security Awareness","security-awareness","Phishing, social engineering, human error","#22c55e",[]]