Hackers Use Fake BTS World Tour Ticket Sites to Scam Fans Across Multiple Countries

Kaspersky researchers identified a coordinated fraud campaign targeting BTS fans around the ARIRANG tour: at least ten fake domains mimicking official pre-sale pages for nine countries were promoted via Instagram to steal payments. The scam reconstructs the purchase journey, uses urgency and fake checkout errors to push victims toward instant PIX payments (in Brazil), and routes funds to money mule accounts, making recovery difficult; victims are advised to only use official domains, avoid social media links, and contact banks immediately if defrauded.