Rise of Cyber Threats Targeting 2026 FIFA World Cup
As the countdown to the 2026 FIFA World Cup begins, cybercriminals have started establishing their malicious infrastructure to exploit the hype surrounding this major sporting event. Check Point Research (CPR), known for its pioneering cybersecurity solutions, has released insightful findings on the early-stage attempts to manipulate fans, disrupt ticket sales, and ultimately siphon profits from one of the world's biggest sports events.
Uncovering Organized Campaigns
In a recent report, CPR has revealed a concerted effort involving thousands of fake domains, botnets, and phishing tools that mimic legitimate FIFA and host city assets. Since August 1, 2025, Check Point has identified over 4,300 new domains that impersonate terms like “FIFA” and “World Cup,” as well as the names of host cities such as Dallas, Miami, Toronto, and Mexico City. These registrations are not organic but rather orchestrated waves that utilize the same DNS infrastructure and are focused on specific registrars like GoDaddy and Dynadot, which cater to bulk registrations.
The alarming aspect of these domains is that many are structured for long-term use, incorporating mentions of FIFA 2030 and 2034. This