Home-Field Disadvantage: AiTM, QR-Code Phishing, and Infostealers at the 2026 FIFA World Cup
ID: 437f5af5-810a-5fdb-8386-87eabe03aa71
STIX ID: report--437f5af5-810a-5fdb-8386-87eabe03aa71
Feed Name: Arctic Wolf Blog
Arctic Wolf Labs documents an active, large-scale, mobile-first criminal ecosystem leveraging generative AI and social-media-to-messenger lures for World Cup-themed scams: last-minute “free stream” and ticket lures, QR-code (quishing) PDFs targeting host-city staff, a real-time AiTM phishing kit that defeats OTP/MFA to take over Google Workspace accounts, and Windows/Android infostealers exfiltrating credentials and sensitive data; defenders should assume targeted staff and vendors are at risk, hunt associated domains/IOCs, and adopt phishing-resistant MFA.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.