All Topics
All Topics
Technology
Technology
AI
AI
Business
Business
Entertainment
Entertainment
News
News
Programming
Programming
Security
Security
Science
Science
Design
Design
Environment
Environment
Finance
Finance
Crypto
Crypto
Politics
Politics
Sports
Sports
Education
Education
Gaming
Gaming
Art
Art
Music
Music
Health
Health
Books
Books
Food
Food
Travel
Travel
Personal
Personal
Bluesky
Twitter

Over 4,300 FIFA World Cup 2026 Phishing Domains Linked to Chinese Cybercrime Operation

17d ago· 1 min readenNews

Summary

Over 4,300 fraudulent FIFA World Cup 2026 domains have been registered since August 2025, linked to a Chinese-speaking cybercrime operation called GHOST STADIUM. The phishing campaign uses more than 300 cloned FIFA.com sites that replicate the official single sign-on login, including a copied client ID. Images load directly from FIFA's servers to evade detection tools. The cloned login prompts password resets, allowing attackers to lock victims out of their accounts and resell tickets tied to compromised accounts. Traffic is driven through Facebook ads using recycled content.

Source

bskyOver 4,300 FIFA World Cup 2026 Phishing Domains Linked to Chinese Cybercrime Operationbriefly.co

Key quotes

· 5 pulled
More than 4,300 fraudulent FIFA domains were registered since August 2025, with Group-IB attributing them to a Chinese-speaking operation called GHOST STADIUM.
The phishing kit runs across more than 300 cloned sites that closely replicate fifa.com, including FIFA's PingIdentity single sign-on login and a copied genuine client ID.
Images load from FIFA's servers, helping the pages evade tools that flag copied images.
The cloned login prompts password resets, enabling attackers to lock victims out and resell tickets tied to compromised accounts.
Traffic is driven by Facebook ads using reused tra
Snippet from the RSS feed
Thousands of lookalike FIFA domains and phishing kits are targeting World Cup 2026 fans, using cloned login pages and password resets to hijack accounts and resell tickets.

You might also wanna read

Comments

Sign in to join the conversation.

No comments yet. Be the first.