Over 4300 Fake FIFA Domains Target World Cup Fans (infosecurity-magazine.com)

• Group-IB identified over 4300 fake FIFA domains
• Ghost Stadium actor runs 300+ phishing sites via Facebook ads
• Four separate threat actors, including infostealer campaigns
• Estimated ticket fraud losses of $71M to $474M

"Group-IB has discovered more than 4300 fraudulent domains imitating FIFA's official website, targeting fans of the 2026 FIFA World Cup. The operation, including a threat actor tracked as Ghost Stadium, spans six fraud schemes and four independent actors. Most domains are dormant, ready to activate before kickoff."