Cybercriminals Are Targeting the FIFA World Cup 2026

FortiGuard Labs warns that threat actors are actively exploiting FIFA World Cup 2026 interest: over 13,000 themed domains registered (≈8.8% flagged malicious), thousands of impersonation accounts, hundreds of fake ticket/merchandise and betting sites, malicious APKs/executables (including an executable with possible ransomware behavior), and stealer log telemetry exposing hundreds of thousands of fan credentials and thousands of FIFA-related accounts—creating a broad, multi-vector cybercrime ecosystem that targets fans, organizers, and third parties.