While football might be coming home, keep cyber attacks away!

As the World Cup gets into full swing, many issues outside the actual football seem to be dominating the discussion. One of these is cyber security, and the global nature and scale of the tournament means it is a natural target for hackers.

These attacks are known to be targeting the World Cup’s brand integrity, ransom threats, physical security, and data governance or leaks. With global TV and online audiences in the billions, as well as ticket sales, merchandise and other products and services changing hands, the World Cup is like a pick and mix counter for cyber criminals. From phishing emails to fake URLs and fraudulent websites, the threats can be financially-motivated for quick profiteering.

The nature of cyber threats

So far, over 170 domains have been uncovered that attempt to impersonate World Cup websites, applications or emails. This includes over 53 fake applications that install malware on users’ devices to run illegal adware, steal or encrypt data, harvest password details and personal information, and promote fake marketing or sales initiatives.

There have also been more sophisticated threats identified that target the tournament’s organisers, stadiums, ticketing merchants, sponsors, staff, and national teams themselves. These organisations are at risk of being targeted by groups looking to disrupt for political reasons and/or for financial gain. Ransomware such as Redline and Lockbit are known to be active in and around the World Cup.

Secure your business

Every month, our partners the South West Cyber Resilience Centre (SWCRC) are providing some top tips to shore up your business from cyber attacks. The SWCRC is led by serving police officers, as part of a not-for-profit partnership with businesses and academia.

➡️ Read November's guidance.