FBI warns of fake FIFA websites running World Cup fraud schemes

Key Points:

• The FBI has issued a warning about numerous fake websites impersonating FIFA in advance of the 2026 World Cup, aimed at stealing personal and financial information through fraudulent ticket sales and hospitality packages.
• These phishing sites use slight variations of the official FIFA domain and alternative top-level domains, targeting users across multiple countries, including the US, Canada, and several European nations. The potential impact includes identity theft and financial scams.
• Users are advised to report suspicious activities to the FBI’s Internet Crime Complaint Center (IC3) and to be vigilant when interacting with online offers related to the World Cup.

Technical Details: The fraudulent websites employ minor spelling changes in domain names (e.g., fiffa[.]com) and utilize various top-level domains to deceive users. Threat actors have been linked to a campaign attributed to a Chinese group known as Ghost Stadium.

MITRE ATT&CK Techniques:

• T1566 - Phishing (Initial Access)

IOCs Mentioned:

• fiffa[.]com
• jobs-fifa[.]com
• fifa-hiring[.]com