The Scam Will Go On: Beware of Fake Offers for Celine Dion Concert Tickets

Group-IB analyzed a multi-layered ticket scam targeting Celine Dion fans that uses social engineering in fan communities and phishing websites built on Shopify to sell duplicated or fake tickets. The report documents attacker tactics (peer-to-peer bank transfers, duplicated Ticketmaster links, OAuth-based Shopify account pages), provides a long list of malicious domains, Shopify client IDs and OAuth state values indicative of a reused phishing kit, and offers consumer and defender recommendations.