Fake FIFA World Cup Streaming Sites target Virtual Fans

Zscaler ThreatLabz observed a surge of FIFA World Cup–themed scams and malware campaigns that lure victims via fake streaming/ticket sites, SEO-poisoned search results, compromised CMS pages, and malicious PDFs; notable threats include SolarMarker infostealer and Parrot TDS fake-update scripts. The report documents redirect chains, payment-card and credential theft attempts, examples of malicious URLs/domains and file hashes, and provides mitigation guidance for defenders and users.