Fraudulent FIFA Domains Target 2026 World Cup Fans
A significant fraud operation involving over 4,300 fake domains impersonating FIFA's official website has been identified, targeting fans of the 2026 FIFA World Cup. According to Group-IB, the operation involves six fraud schemes and four independent threat actors. The domains, many of which are dormant, are poised to activate as the World Cup approaches. The operation's central actor, Ghost Stadium, is described as a Chinese-speaking group using phishing domains to replicate FIFA's website. These sites use official FIFA logos and images to appear legitimate, with paid Facebook ads driving traffic to them.