Found a lot of fake World Ball websites. Latent malware sucks money.

Many fake World Ball websites, money-sucking malware and login thieves have been found.

According to a report by the website, The Hacker News has mentioned a number of impersonations of World Cup festivals from numerous hackers, several groups, with the aim of deceiving in the form of scam (Scam) and spreading various kinds of malware, according to the following

Registration of thousands of fake domains (Domains)

A research team from Group-IB, an expert company in the development of cybersecurity tools, has detected that a group of hackers from China, an expert in the use of phishing fraudulent tools called GHOST STADIUM, has been registering domains that impersonate FIFA and the World Cup since August 2025. 2568) A large number of 4,300 domains. When the website on the domain was examined, it was found that it was almost inextricably similar to the official website of the FIFA organization. According to the termination investigation, FIFA's logo and Client ID were retrieved directly from the official website, and it imitated the single sign-on system. With the use of PingIdentity, it was like a real website system.

As for the scam, the research team found that victims were often retrieved through fake Facebook ads, and some from Telegram, WhatsApp, and through the Search Engine. When they arrived at the login page, the login page would prompt the victim to change their password, allowing hackers to steal the victim's FIFA account and eventually resell the victim's World Cup tickets.

In addition to the above investigation, a research team from another cybersecurity company, FortiGuard Labs, from Fortinet, detected more than 18,000 World Cup-related domains. These domains were registered between January and May this year. When it was examined, about 8.8% of these domains were involved in malware and deception.

Banking Trojan is hidden inside a fake Streaming App.

Not only did the World Cup have a large number of fake websites used in hoaxes, a research team from ThreatFabric, a specialist online bank fraud monitoring firm, also detected a spike in the volume of bootleg streaming applications during the World Cup, often claiming to be RojaDirecta applications. These applications are not available for download on the official app store like Google Play, but are available for download through the app store and the 3rd Party website. Users must install Sideloading and skip warnings on board during installation.

A research team from Kaspersky, a famous anti-Virus software developer, has linked these fake applications to two families of bank account-sucking malware or Banking Trojan, Massiv and Perseus. These malware families, after being installed on the machine, will immediately request Permission to access the Disabled User Support Mode or Accessibility Mode. In order to use these modes to stack the bank app screen to deceive login thieves (Overlay Attack), as well as the ability to trap typing, and collect passwords. One-time tasks (OTP or One-Time Password). The ThreatFabric research team has warned that if a bootleg streaming app tries to request access to Accessibility Mode, ensure that it is malware because there is not enough reason to access this mode.

Social Scam and other threats

In addition, scams have been detected on social media. A research team from Bitdefender, another antivirus software developer, has detected up to 55 World Cup-themed ads on Facebook and Instagram platforms. These ads often lead victims to phishing scam sites. A research team from Fortinet has detected up to 1,700 FIFA impersonating fake accounts, more than 90% of which are on Facebook and Instagram.

Even worse, in many cities of co-hosts like Mexico, such as Mexico City, Monterrey, and Guadalajara, about 10% - 12% of free Wifi has been found to be open networking without a password and pairing via the WPS feature. This is so lax that hackers can easily use it in cyber espionage operations.

# Trending # lemon 8 diary # Watch football # Fifa # freedomhack