Cyber Threats to the FIFA World Cup Qatar 2022

This report analyzes cyber threats observed in the lead-up to the Qatar 2022 World Cup, documenting large-scale impersonation (domains, apps, social pages), credential theft via RedLine logs, hacktivist DDoS/defacements, initial-access broker listings, and ransomware activity (LockBit). It highlights volumes (e.g., 174 malicious domains, 53 fake apps), diverse attacker motivations (financial crime, hacktivism, espionage), concrete IOC examples, and prescribes risk-based mitigations such as MFA, patching, app-store hygiene, and continuous monitoring.