World Cup Phishing Surge: 203 Malicious IPs Detected
ID: 2b53fb13-ac4d-5d17-9388-4aed740725da
STIX ID: report--2b53fb13-ac4d-5d17-9388-4aed740725da
Feed Name: GBHackers
Threat Score
The report details a rapidly expanding, distributed phishing ecosystem exploiting the 2026 FIFA World Cup brand: researchers mapped 222 domains (206 active) across 203 IPs, identified at least four distinct operator clusters reusing phishing kits and TLS certificates, and highlighted heavy use of Cloudflare and a small set of registrars—creating broad opportunities for credential and payment fraud and complicating takedown and attribution efforts.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.